Cisco 300-730 Online Practice Questions and Exam Preparation

Cisco 300-730 Online Questions & Answers

• Question 221:

  Refer to the exhibit.

  

  All internal clients behind the ASA are port address translated to the public outside interface that has an IP address of 3.3.3.3. Client 1 and client 2 have established successful SSL VPN connections to the ASA. What must be implemented so that "3.3.3.3" is returned from a browser search on the IP address?

  A. Same-security-traffic permit inter-interface under Group Policy
  B. Exclude Network List Below under Group Policy
  C. Tunnel All Networks under Group Policy
  D. Tunnel Network List Below under Group Policy
  C. Tunnel All Networks under Group Policy

  ---

  Explanation

  The browser's ip is the ASA's public ip 3.3.3.3. This means the traffic is initiated from ASA. So the vpn client should tunnel all traffic to ASA.

• Question 222:

  Which clientless SSLVPN supported feature works when the http-only-cookie command is enabled?

  A. Citrix load balancer
  B. port reflector
  C. Java rewriter
  D. script browser
  E. Java plug-ins
  D. script browser

  ---

  Explanation

  The following Clientless SSL VPN features will not work when the http-only-cookie command is enabled:

  1.Java plug-ins

  2.Java rewriter

  3.Port forwarding

  4.File browser

  5.Sharepoint features that require desktop applications (for example, MS Office applications)

  6.AnyConnect Web launch

  7.Citrix Receiver, XenDesktop, and Xenon

  8.Other non-browser-based and browser plugin-based applications

• Question 223:

  Refer to the exhibit.

  

  Cisco AnyConnect must be set up on a router to allow users to access internal servers 192.168.0.10 and 192.168.0.11. All other traffic should go out of the client's local NIC. Which command accomplishes this configuration?

  A. svc split include 192.168.0.0 255.255.255.0
  B. svc split exclude 192.168.0.0 255.255.255.0
  C. svc split include acl CCNP
  D. svc split exclude acl CCNP
  C. svc split include acl CCNP

  ---

  Explanation

• Question 224:

  Refer to the exhibit.

  

  Which action must be taken on the IPsec tunnel configuration to resolve the issue?

  A. The access lists on each peer must mirror each other.
  B. The transform set on each peer must match.
  C. The access lists on each peer must be identical.
  D. The transform set on each peer must be compatible.
  A. The access lists on each peer must mirror each other.

  ---

  Explanation

  https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/5409-ipsec-debug-00.html

• Question 225:

  What are two advantages of using GETVPN to traverse over the network between corporate offices? (Choose two.)

  A. It has unique session keys for improved security.
  B. It supports multicast.
  C. It has QoS support.
  D. It is a highly scalable any to any mesh topology.
  E. It supports a hub-and-spoke topology.
  B. It supports multicast.
  C. It has QoS support.

  ---

  Explanation