Cisco CCNP 300-730 Questions & Answers

• Question 1:

  Which two types of SSO functionality are available on the Cisco ASA without any external SSO servers? (Choose two.)

  A. SAML

  B. NTLM

  C. Kerberos

  D. OAuth 2.0

  E. HTTP Basic

  Correct Answer: BE

• Question 2:

  Refer to the exhibit.

  

  Which type of VPN implementation is displayed?

  A. IKEv1 cluster

  B. IKEv2 backup gateway

  C. IKEv2 load balancer

  D. IKEv2 reconnect

  Correct Answer: C

• Question 3:

  A network engineer must design a clientless VPN solution for a company. VPN users must be able to access several internal web servers. When reachability to those web servers was tested, it was found that one website is not being rewritten correctly by the ASA. What is a potential solution for this issue while still allowing it to be a clientless VPN setup?

  A. Set up a smart tunnel with the IP address of the web server.

  B. Set up a NAT rule that translates the ASA public address to the web server private address on port 80.

  C. Set up Cisco AnyConnect with a split tunnel that has the IP address of the web server.

  D. Set up a WebACL to permit the IP address of the web server.

  Correct Answer: B

• Question 4:

  Which technology and VPN component allows a VPN headend to dynamically learn post NAT IP addresses of remote routers at different sites?

  A. DMVPN with ISAKMP

  B. GETVPN with ISAKMP

  C. DMVPN with NHRP

  D. GETVPN with NHRP

  Correct Answer: C

• Question 5:

  An engineer must configure remote desktop connectivity for offsite admins via clientless SSL VPN, configured on a Cisco ASA to Windows Vista workstations. Which two configurations provide the requested access? (Choose two.)

  A. Telnet bookmark via the Telnet plugin

  B. RDP2 bookmark via the RDP2 plugin

  C. VNC bookmark via the VNC plugin

  D. Citrix bookmark via the ICA plugin

  E. SSH bookmark via the SSH plugin

  Correct Answer: BC

• Question 6:

  In order to enable FlexVPN to use a AAA attribute list, which two tasks must be performed? (Choose two.)

  A. Define the RADIUS server.

  B. Verify that clients are using the correct authorization policy.

  C. Define the AAA server.

  D. Assign the list to an authorization policy.

  E. Set the maximum segment size.

  Correct Answer: BD

• Question 7:

  An engineer notices that while an employee is connected remotely, all traffic is being routed to the corporate network. Which split-tunnel policy allows a remote client to use their local provider for Internet access when working from home?

  A. tunnelall

  B. excludeall

  C. tunnelspecified

  D. excludespecified

  Correct Answer: C

• Question 8:

  What are two purposes of the key server in Cisco IOS GETVPN? (Choose two.)

  A. to download encryption keys

  B. to maintain encryption policies

  C. to distribute routing information

  D. to encrypt data traffic

  E. to authenticate group members

  Correct Answer: BE

• Question 9:

  Refer to the exhibit.

  

  A network engineer is reconfiguring clientless SSLVPN during a maintenance window, and after testing the new configuration, is unable to establish the connection. What must be done to remediate this problem?

  A. Enable client services on the outside interface.

  B. Enable clientless protocol under the group policy.

  C. Enable DTLS under the group policy.

  D. Enable auto sign-on for the user's IP address.

  Correct Answer: B

• Question 10:

  DRAG DROP

  Drag and drop the code snippets from the right onto the blanks in the configuration to implement FlexVPN. Not all snippets are used.

  Select and Place:

  

  Correct Answer: