Cisco 300-730 Online Practice Questions and Exam Preparation

Cisco 300-730 Online Questions & Answers

• Question 1:

  Refer to the exhibit.

  

  Which two tunnel types produce the show crypto ipsec sa output seen in the exhibit? (Choose two.)

  A. crypto map
  B. DMVPN
  C. GRE
  D. FlexVPN
  E. VTI
  B. DMVPN
  E. VTI

  ---

  Explanation

  for whoever tested it in the lab, For flexvpn the output of show crypto ipsec sa, starts with the following: CSR1#show crypto ipsec sa interface: Virtual-Access // not interface: Tunnel0

• Question 2:

  An engineer is requesting an SSL certificate for a VPN load-balancing cluster in which two Cisco ASAs provide clientless SSLVPN access. The FQDN that users will enter to access the clientless VPN is asa.example.com, and users will be redirected to either asa1.example.com or asa2.example.com. The cluster FQDN and individual Cisco ASAs FQDNs resolve to IP addresses 192.168.0.1, 192.168.0.2, and 192.168.0.3 respectively. The issued certificate must be able to be used to validate the identity of either ASA in the cluster without returning any certificate validation errors. Which fields must be included in the certificate to meet these requirements?

  A. CN=*.example.com, SAN=asa.example.com
  B. CN=192.168.0.1, SAN=asa1.example.com, asa2.example.com
  C. CN=asa.example.com, SAN=asa.example.com, asa1.example.com, asa2.example.com
  D. CN=192.168.0.1, SAN=192.168.0.1, 192.168.0.2, 192.168.0.3
  C. CN=asa.example.com, SAN=asa.example.com, asa1.example.com, asa2.example.com

  ---

  Explanation

• Question 3:

  Which command automatically initiates a smart tunnel when a user logs in to the WebVPN portal page?

  A. auto-upgrade
  B. auto-connect
  C. auto-start
  D. auto-run
  C. auto-start

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/vpn/asa_91_vpn_config/webvpn-configure-policy-group.html

• Question 4:

  Which type of VPN technology is being used when the ssl trust-point command is configured?

  A. GETVPN
  B. IPsec site-to-site VPN
  C. SSL Remote Access VPN
  D. DMVPN
  C. SSL Remote Access VPN

  ---

  Explanation

• Question 5:

  Which two NHRP functions are specific to DMVPN Phase 3 implementation? (Choose two.)

  A. registration reply
  B. redirect
  C. resolution reply
  D. registration request
  E. resolution request
  B. redirect
  E. resolution request

  ---

  Explanation

• Question 6:

  What are two differences between ECC and RSA? (Choose two.)

  A. Key generation in ECC is slower and more CPU intensive than RSA.
  B. ECC can have the same security as RSA but with a shorter key size.
  C. ECC cannot have the same security as RSA, even with an increased key size.
  D. Key generation in ECC is faster and less CPU intensive than RSA.
  E. ECC lags in performance when compared with RSA.
  B. ECC can have the same security as RSA but with a shorter key size.
  D. Key generation in ECC is faster and less CPU intensive than RSA.

  ---

  Explanation

• Question 7:

  In order to enable FlexVPN to use a AAA attribute list, which two tasks must be performed? (Choose two.)

  A. Define the RADIUS server.
  B. Verify that clients are using the correct authorization policy.
  C. Define the AAA server.
  D. Assign the list to an authorization policy.
  E. Set the maximum segment size.
  B. Verify that clients are using the correct authorization policy.
  D. Assign the list to an authorization policy.

  ---

  Explanation

• Question 8:

  Where is split tunneling defined for IKEv2 remote access clients on a Cisco router?

  A. IKEv2 authorization policy
  B. Group Policy
  C. virtual template
  D. webvpn context
  A. IKEv2 authorization policy

  ---

  Explanation

  VPN-ROUTER(config)# ip access-list extended SPLIT_TUNNEL_ACL VPN-ROUTER(config-std-nacl)# permit 172.20.1.0 0.0.0.255 VPN-ROUTER(config-std-nacl)# VPN-ROUTER(config-std-nacl)# crypto ikev2 authorization policy EMPLOYEES VPN-ROUTER(config-ikev2-author-policy)# route set access-list SPLIT_TUNNEL_ACL

• Question 9:

  Refer to the exhibit.

  

  Based on the debug output, which type of mismatch is preventing the VPN from coming up?

  A. interesting traffic
  B. lifetime
  C. preshared key
  D. PFS
  A. interesting traffic

  ---

  Explanation

  TS unacceptable:

  The IPsec SA setup has failed due to a mismatch in the policy rule definition between the gateways for the tunnel configuration.

  Check the local and remote network configuration on both gateways.

• Question 10:

  Refer to the exhibit.

  

  An engineer must configure a FlexVPN site-to-site GRE tunnel that uses iPsec between two Cisco routers. The indicated configuration was applied on Router_B, but the tunnel fails to come up. Which IP address must be set on Router_B to resolve the issue?

  A. 192.16.1.1
  B. 192.16.1.2
  C. 192.168.10.1
  D. 192.168.10.2
  A. 192.16.1.1

  ---

  Explanation