Cisco 300-730 Online Practice Questions and Exam Preparation

Cisco 300-730 Online Questions & Answers

• Question 11:

  A DMVPN spoke router tunnel is up and passing traffic, but it cannot establish an EIGRP neighbor relationship with the hub router. Which solution resolves this issue?

  A. Enable EIGRP Split Horizon on the hub tunnel interface.
  B. Remove the EIGRP stub configuration on the spoke tunnel interface.
  C. Enable the EIGRP next hop self feature on the hub tunnel interface.
  D. Configure the dynamic NHRP multicast map on the hub tunnel interface.
  D. Configure the dynamic NHRP multicast map on the hub tunnel interface.

  ---

  Explanation

• Question 12:

  An engineer is troubleshooting a new DMVPN setup on a Cisco IOS router. After the show crypto isakmp sa command is issued, a response is returned of "MM_NO_STATE." Why does this failure occur?

  A. The ISAKMP policy priority values are invalid.
  B. ESP traffic is being dropped.
  C. The Phase 1 policy does not match on both devices.
  D. Tunnel protection is not applied to the DMVPN tunnel.
  C. The Phase 1 policy does not match on both devices.

  ---

  Explanation

• Question 13:

  Which two remote access VPN solutions support SSL? (Choose two.)

  A. FlexVPN
  B. clientless
  C. EZVPN
  D. L2TP
  E. Cisco AnyConnect
  B. clientless
  E. Cisco AnyConnect

  ---

  Explanation

• Question 14:

  Which two Java-based components for web browsers in clientless SSL VPN sessions are distributed by Cisco? (Choose two.)

  A. ARD
  B. RDP2
  C. VNC
  D. XenApp
  E. SPICE
  B. RDP2
  C. VNC

  ---

  Explanation

• Question 15:

  A company is setting up a dynamic crypto map on the Cisco ASA at the headquarters to accept connections from the branch offices. There will be no IP subnet overlap between the branch offices, but the engineer does not know which encryption domains will be requested by the branch offices. Additionally, the company security policy states that routing protocol traffic should not leave the HQ network. Which solution should be used to route traffic back to the branches from the Cisco ASA with minimal administrative effort?

  A. Configure Reverse Route Injection on the dynamic crypto map.
  B. Configure a default route with the tunneled keyword on all branch routers.
  C. Configure static routes for remote subnets.
  D. Configure snapshot routing with EIGRP to send out of band routing updates.
  A. Configure Reverse Route Injection on the dynamic crypto map.

  ---

  Explanation

• Question 16:

  Refer to the exhibit.

  

  VPN tunnels between a spoke and two DMVPN hubs are not coming up. The network administrator has verified that the encryption, hashing, and DH group proposals for Phase 1 and Phase 2 match on both ends. What is the solution to this issue?

  A. Ensure bidirectional UDP 500/4500 traffic.
  B. Increase the isakmp phase 1 lifetime.
  C. Add NAT statements for VPN traffic.
  D. Enable shared tunnel protection.
  A. Ensure bidirectional UDP 500/4500 traffic.

  ---

  Explanation

• Question 17:

  Refer to the exhibit.

  

  Based on this ASDM output, which remote access technologies are allowed on the ASA?

  A. SSLAnyConnect VPN
  B. IKEv2 and SSL AnyConnect VPN
  C. SSL clientless VPN
  D. IKEv2 AnyConnect VPN
  D. IKEv2 AnyConnect VPN

  ---

  Explanation

• Question 18:

  Which command identi es a Cisco AnyConnect profile that was uploaded to the ash of an IOS router?

  A. svc import profile SSL_pro le ash:simos-pro le.xml
  B. anyconnect profile SSL_pro le ash:simos-pro le.xml
  C. crypto vpn anyconnect profile SSL_pro le ash:simos-pro le.xml
  D. webvpn import profile SSL_pro le ash:simos-pro le.xml
  C. crypto vpn anyconnect profile SSL_pro le ash:simos-pro le.xml

  ---

  Explanation

• Question 19:

  Which two dynamic routing protocols work over FlexVPN for failover redundancy? (Choose two.)

  A. IGRP
  B. IS-IS
  C. RIP
  D. OSPF
  E. EIGRP
  D. OSPF
  E. EIGRP

  ---

  Explanation

• Question 20:

  A router is being configured for IKEv2 AnyConnect using AnyConnect-EAP. How would the administrator separate profiles for administrators and employees so that authorization differs when they connect?

  A. Define group aliases on the headend and have the user pick the appropriate alias when they connect
  B. Define group-urls on the headend and create two XML profiles to match the administrator and user group urls
  C. Create a certificate map and match on the appropriate certificate fields
  D. Define key-ids on the headend and create two XML profiles to match the administrator and user key-ids.
  D. Define key-ids on the headend and create two XML profiles to match the administrator and user key-ids.

  ---

  Explanation