Cisco 300-730 Online Practice Questions and Exam Preparation

Cisco 300-730 Online Questions & Answers

• Question 111:

  Which two Secure Client Advantage and Premier models are available for Cisco Secure Client Remote Access VPN? (Choose two.)

  A. Secure Client Plus
  B. Secure Client Premium
  C. Secure Client Shared
  D. Secure Client Apex
  E. Secure Client Essentials
  D. Secure Client Apex
  E. Secure Client Essentials

  ---

  Explanation

• Question 112:

  Which command shows the smart default configuration for an IPsec profile?

  A. show run all crypto ipsec profile
  B. ipsec profile does not have any smart default configuration
  C. show smart-defaults ipsec profile
  D. show crypto ipsec profile default
  D. show crypto ipsec profile default

  ---

  Explanation

• Question 113:

  Which feature must be disabled in EIGRP for DMVPN spokes to learn routes to other DMVPN spokes?

  A. split-horizon
  B. bandwidth percent
  C. next-hop-self
  D. hold time
  A. split-horizon

  ---

  Explanation

• Question 114:

  An engineer is using DMVPN to provide secure connectivity between a data center and remote sites. Which two routing protocols should be used between the routers? (Choose two.)

  A. IS-IS
  B. BGP
  C. RIPv2
  D. OSPF
  E. EIGRP
  B. BGP
  E. EIGRP

  ---

  Explanation

• Question 115:

  An engineer is implementing the FlexVPN solution on a Cisco IOS router. The router must only terminate VPN requests and must not initiate them. Additionally, the interface must support VPNs from other routers and Cisco AnyConnect connections. Which interface type must be configured to meet these requirements?

  A. point-to-point GRE tunnel interface
  B. multipoint GRE tunnel interface
  C. static virtual tunnel interface
  D. virtual template interface
  D. virtual template interface

  ---

  Explanation

• Question 116:

  Which IKE identity does an IOS/IOS-XE headend expect to receive if an IPsec Cisco AnyConnect client uses default settings?

  A. *$SecureMobilityClient$*
  B. *$AnyConnectClient$*
  C. *$RemoteAccessVpnClient$*
  D. *$DfltlkeldentityS*
  B. *$AnyConnectClient$*

  ---

  Explanation

  https://www.cisco.com/c/en/us/support/docs/security/flexvpn/200555-FlexVPN-AnyConnect-IKEv2-Remote-Access.html

• Question 117:

  A clientless SSLVPN is set up to allow remote users to access internal HTTPS webservers. Users can access all but one server and see the message "Connection Failed. Server 192.168.0.101 unavailable". Pings between the Cisco ASA and the webserver are successful, and users can connect to the webserver when they use their computer in the internal network. Which action resolves this issue?

  A. Add an SSL cipher that can be negotiated with the webserver to the Cisco ASA.
  B. Add the http 192.168.0.101 255.255.255.255 inside command to the Cisco ASA.
  C. Configure routing on the Cisco ASA so it can reach the webserver.
  D. Configure a DNS server that can resolve the webserver domain on the Cisco ASA.
  A. Add an SSL cipher that can be negotiated with the webserver to the Cisco ASA.

  ---

  Explanation

• Question 118:

  A company needs to ensure only corporate issued laptops and devices are allowed to connect with the Cisco AnyConnect client. The solution should be applicable to multiple operating systems, including Windows, MacOS, and Linux, and should allow for remote remediation if a corporate issued device is stolen. Which solution should be used to accomplish these goals?

  A. Use a DAP registry check on the system to determine the relationship with the corporate domain.
  B. Use a DAP file check on the system to determine the relationship with the corporate domain.
  C. Install and authenticate user certificates on the corporate devices.
  D. Install and authenticate machine certificates on the corporate devices
  D. Install and authenticate machine certificates on the corporate devices

  ---

  Explanation

• Question 119:

  A Cisco ASA is configured in active/standby mode. What is needed to ensure that Cisco AnyConnect users can connect after a failover event?

  A. AnyConnect images must be uploaded to both failover ASA devices.
  B. The vpnsession-db must be cleared manually.
  C. Configure a backup server in the XML profile.
  D. AnyConnect client must point to the standby IP address.
  A. AnyConnect images must be uploaded to both failover ASA devices.

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/ha_active_standby.html

• Question 120:

  Refer to the exhibit.

  

  Given the output of the show ip route command, which remote access VPN technology is in use?

  A. Reverse Route Injection
  B. FlexVPN
  C. Dynamic Crypto Map
  D. DMVPN
  B. FlexVPN

  ---

  Explanation