Cisco 300-730 Online Practice Questions and Exam Preparation

Cisco 300-730 Online Questions & Answers

• Question 1:

  DRAG DROP

  Drag and drop the actions from the left into the sequence on the right to con gure Clientless SSL VPN on a Cisco ASA.

  Select and Place:

  

  

  Explanation

• Question 2:

  DRAG DROP

  Drag and drop the GET VPN components from the left onto the correct descriptions on the right.

  Select and Place:

  

  

  Explanation

  Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_getvpn/configuration/xe-3s/sec-get-vpn-xe-3s-book/sec-get-vpn.html

• Question 3:

  DRAG DROP

  Drag and drop the GETVPN components from the left onto the descriptions on the right.

  Select and Place:

  

  

  Explanation

• Question 4:

  Refer to the exhibit.

  

  An engineer must configure a FlexVPN site-to-site GRE tunnel that uses IPsec between two Cisco routers. The indicated configuration was applied on Router_A, but the tunnel fails to come up. Which IP address must be set on Router_A to resolve the issue?

  A. 192.16.1.1
  B. 192.16.1.2
  C. 192.168.10.1
  D. 192.168.10.2
  B. 192.16.1.2

  ---

  explanation:

  Explanation

• Question 5:

  An engineer configures the Group URL feature on a Cisco Secure Firewall ASA. The requirement is to place contractors using Cisco Secure Client to access the network into a limited access group. Which information must be referenced in the URL?

  A. group-policy
  B. vpn-lter
  C. IP address
  D. group-alias
  D. group-alias

  ---

  explanation:

  Explanation

• Question 6:

  Which two tunnel negotiation IKEV2 debug commands are used in Cisco ASA? (Choose two.)

  A. debug crypto ca
  B. debug crypto ikev2 platform
  C. debug crypto ikev2
  D. debug crypto ikev2 error
  E. debug crypto ikev2 protocol
  C. debug crypto ikev2
  E. debug crypto ikev2 protocol

  ---

  explanation:

  Explanation

• Question 7:

  An engineer must design a VPN solution with this criteria:

  1.Configured on an IOS XE router.

  2.Able to terminate policy-based VPNs from Cisco and non-Cisco devices.

  3.QoS can be applied on a per-tunnel basis.

  Which VPN technology must be used to accomplish this design?

  A. GETVPN
  B. DMVPN
  C. Multi-SA VTIs
  D. Dynamic Crypto map
  C. Multi-SA VTIs

  ---

  explanation:

  Explanation

• Question 8:

  Which two Secure Client Advantage and Premier models are available for Cisco Secure Client Remote Access VPN? (Choose two.)

  A. Secure Client Plus
  B. Secure Client Premium
  C. Secure Client Shared
  D. Secure Client Apex
  E. Secure Client Essentials
  D. Secure Client Apex
  E. Secure Client Essentials

  ---

  explanation:

  Explanation

• Question 9:

  Which interface type must be used in an IKEv2 deployment that needs to route non-IP traffic?

  A. virtual tunnel interface
  B. dynamic virtual tunnel interface
  C. GRE interface
  D. bridge virtual interface
  C. GRE interface

  ---

  explanation:

  Explanation

• Question 10:

  A network engineer configured Secure Client VPN for a vendor to provide access to internal resources for a migration project. A pool of 192.168.100.0/28 has been assigned and a local database for user authentications has been configured. An image of Cisco Secure Client Client 4.7 for Windows has also been added. The vendor allocated 10 engineers to the project, and all users were able to connect to the corporate resources. After some time, the vendor added another six resources to the project. After this change, engineers from the vendor reported frequent disconnections.

  Which action resolves the issue?

  A. Add the new users to the local database on the ASA.
  B. Increase the amount of IP addresses in the pool.
  C. Allocate more Cisco Secure Client licenses to the ASA.
  D. Upgrade new users to Cisco Secure Client 4.7.
  B. Increase the amount of IP addresses in the pool.

  ---

  explanation:

  Explanation