Cisco 300-730 Online Practice Questions and Exam Preparation

Cisco 300-730 Online Questions & Answers

• Question 201:

  A network engineer must expand a company's Cisco AnyConnect solution. Currently, a Cisco ASA is set up in North America and another will be installed in Europe with a different IP address. Users should connect to the ASA that has the lowest Round Trip Time from their network location as measured by the AnyConnect client. Which solution must be implemented to meet this requirement?

  A. VPN Load Balancing
  B. IP SLA
  C. DNS Load Balancing
  D. Optimal Gateway Selection
  D. Optimal Gateway Selection

  ---

  Explanation

  Optimal Gateway Selection (OGS) is a feature that can be used for determining which gateway has the lowest RTT and connect to that gateway. Using the Optimal Gateway Selection (OGS) feature, administrators can minimize latency for Internet traffic without user intervention. With OGS, AnyConnect identifies and selects which secure gateway is best for connection or reconnection. OGS begins upon first connection or upon a reconnection at least four hours after the previous disconnection

• Question 202:

  A network administrator has been handed a VPN configuration with the ip nhrp summary-map command configured.

  Which type of VPN technology is being used?

  A. GETVPN
  B. Ipsec VPN
  C. DMVPN Phase 3
  D. DMVPN Phase2
  C. DMVPN Phase 3

  ---

  Explanation

• Question 203:

  Refer to the exhibit.

  

  The IKEv2 site-to-site VPN tunnel between two routers is down. Based on the debug output, which type of mismatch is the problem?

  A. preshared key
  B. peer identity
  C. transform set
  D. ikev2 proposal
  B. peer identity

  ---

  Explanation

• Question 204:

  Which two commands help determine why the NHRP registration process is not being completed even after the IPsec tunnel is up? (Choose two.)

  A. show crypto isakmp sa
  B. show ip traffic
  C. show crypto ipsec sa
  D. show ip nhrp traffic
  E. show dmvpn detail
  D. show ip nhrp traffic
  E. show dmvpn detail

  ---

  Explanation

  https://www.cisco.com/c/en/us/support/docs/security/dynamic-multipoint-vpn-dmvpn/111976-dmvpn-troubleshoot-00.html

• Question 205:

  Which feature allows a DMVPN Phase 3 spoke to switch to an alternate hub when the primary hub is unreachable?

  A. multicast PIM
  B. backup NHS
  C. per-tunnel jitter probes
  D. NHRP shortcut
  B. backup NHS

  ---

  Explanation

• Question 206:

  An engineer would like Cisco AnyConnect users to be able to reach servers within the 10.10.0.0/16 subnet while all other traffic is sent out to the Internet. Which IPsec configuration accomplishes this task?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

  ---

  Explanation

• Question 207:

  Refer to the exhibit.

  

  Users at a site report that they cannot access corporate resources after a maintenance window to replace the older VPN headend router over the weekend.

  After the replacement, the configuration had to be recreated. To troubleshoot, the engineer ran crypto debugs and saw the given messages.

  Which action resolves the issue?

  A. Verify that the same transform set is in use on both VPN routers.
  B. Verify that the same preshared keys are in use on both VPN routers.
  C. Verify that the same authentication type is in use on both VPN routers.
  D. Verify that the same encryption ciphers are in use on both VPN routers.
  B. Verify that the same preshared keys are in use on both VPN routers.

  ---

  Explanation

• Question 208:

  Refer to the exhibit.

  

  Client 1 cannot communicate with client 2. Both clients are using Cisco AnyConnect and have established a successful SSL VPN connection to the hub ASA. Which command on the ASA is missing?

  A. dns-server value 10.1.1.2
  B. same-security-traffic permit intra-interface
  C. same-security-traffic permit inter-interface
  D. dns-server value 10.1.1.3
  B. same-security-traffic permit intra-interface

  ---

  Explanation

• Question 209:

  An engineer configures the Group URL feature on a Cisco Secure Firewall ASA. The requirement is to place contractors using Cisco Secure Client to access the network into a limited access group. Which information must be referenced in the URL?

  A. group-policy
  B. vpn-lter
  C. IP address
  D. group-alias
  D. group-alias

  ---

  Explanation

• Question 210:

  An engineer is configuring clientless SSL VPN. The finance department has a database server that only they should access, but the sales department can currently access it. The finance and the sales departments are configured as separate group-policies. What must be added to the configuration to make sure the users in the sales department cannot access the finance department server?

  A. tunnel group lock
  B. smart tunnel
  C. port forwarding
  D. webtype ACL
  D. webtype ACL

  ---

  Explanation