Cisco 300-730 Online Practice Questions and Exam Preparation

Cisco 300-730 Online Questions & Answers

• Question 211:

  An engineer must configure remote desktop connectivity for offsite admins via clientless SSL VPN, configured on a Cisco ASA to Windows Vista workstations. Which two configurations provide the requested access? (Choose two.)

  A. Telnet bookmark via the Telnet plugin
  B. RDP2 bookmark via the RDP2 plugin
  C. VNC bookmark via the VNC plugin
  D. Citrix bookmark via the ICA plugin
  E. SSH bookmark via the SSH plugin
  B. RDP2 bookmark via the RDP2 plugin
  C. VNC bookmark via the VNC plugin

  ---

  Explanation

• Question 212:

  Which two types of web resources or protocols are enabled by default on the Cisco ASA Clientless SSL VPN portal? (Choose two.)

  A. HTTP
  B. ICA (Citrix)
  C. VNC
  D. RDP
  E. CIFS
  A. HTTP
  E. CIFS

  ---

  Explanation

  "NOTE You will not see an option of RDP, VNC, SSH, and/or Telnet unless the appropriate client/server plug-in has been installed first. " Leaves only HTTP and CIFS as your options.

• Question 213:

  An administrator is setting up a VPN on an ASA for users who need to access an internal RDP server. Due to security restrictions, the Microsoft RDP client is blocked from running on client workstations via Group Policy. Which VPN feature should be implemented by the administrator to allow these users to have access to the RDP server?

  A. clientless proxy
  B. smart tunnelcing
  C. clientless plug-in
  D. clientless rewriter
  C. clientless plug-in

  ---

  Explanation

• Question 214:

  Refer to the exhibit.

  

  An IKEv2 site-to-site tunnel between an ASA and a remote peer is not building successfully. What will fix the problem based on the debug output?

  A. Ensure crypto IPsec policy matches on both VPN devices.
  B. Install the correct certificate to validate the peer.
  C. Correct crypto access list on both VPN devices.
  D. Specify the peer IP address in the tunnel group name.
  C. Correct crypto access list on both VPN devices.

  ---

  Explanation

• Question 215:

  A Cisco IOS router is reconfigured to connect to an additional DMVPN hub that is a part of a different DMVPN phase 3 cloud. After this change was made, users begin to experience problems accessing corporate resources over both tunnels. Before the additional tunnel was created, users could access resources over the first tunnel without any issues. Both tunnels terminate on the same interface of the router and use the same IPsec proposals. Which two actions resolve the issue without affecting spoke-to-spoke traffic in either DMVPN cloud? (Choose two.)

  A. Enable dead peer detection for both tunnels.
  B. Use the same shared IPsec profile for both tunnels.
  C. Configure the same NHRP network IDs for both tunnels.
  D. Specify the tunnel destination in each tunnel.
  E. Assign a unique tunnel key to each tunnel.
  B. Use the same shared IPsec profile for both tunnels.
  D. Specify the tunnel destination in each tunnel.

  ---

  Explanation

• Question 216:

  What is a characteristic of GET VPN?

  A. tunnel-less
  B. peer-to-peer
  C. hub-and-spoke
  D. tunneled
  A. tunnel-less

  ---

  Explanation

• Question 217:

  Refer to the exhibit.

  

  A network engineer is configuring remote access VPN on a Cisco IOS router but cannot establish a connection from the Cisco Secure Client client. Which action resolves the issue?

  A. Use symmetric keys in ikev2 profile.
  B. Change Secure Client IKE identity to *$Default$*.
  C. Enable crypto ikev2 http-url cert.
  D. Replace self-signed certi cate with a valid certi cate.
  D. Replace self-signed certi cate with a valid certi cate.

  ---

  Explanation

• Question 218:

  Which configuration allows a Cisco ASA to receive an IPsec connection from a peer with an unknown IP address?

  A. dynamic crypto map
  B. dynamic tunnel group
  C. dynamic AAA attributes
  D. dynamic access policy
  A. dynamic crypto map

  ---

  Explanation

• Question 219:

  An engineer must force a new IKEv2 security association to be built when using FlexVPN.

  Which two commands must the engineer apply to meet the requirement? (Choose two.)

  A. clear exvpn sessions
  B. clear ipsec sa
  C. clear isakmp crypto sa
  D. shut the tunnel interface
  E. no shut the tunnel interface
  D. shut the tunnel interface
  E. no shut the tunnel interface

  ---

  Explanation

• Question 220:

  Which interface type must be used in an IKEv2 deployment that needs to route non-IP traffic?

  A. virtual tunnel interface
  B. dynamic virtual tunnel interface
  C. GRE interface
  D. bridge virtual interface
  C. GRE interface

  ---

  Explanation