Cisco 300-730 Online Practice Questions and Exam Preparation

Cisco 300-730 Online Questions & Answers

• Question 21:

  Refer to the exhibit.

  

  An IPsec Cisco AnyConnect client is failing to connect and generates these debugs every time a connection to an IOS headend is attempted. Which action resolves this issue?

  A. Correct the DH group setting.
  B. Correct the PFS setting.
  C. Correct the integrity setting.
  D. Correct the encryption setting.
  A. Correct the DH group setting.

  ---

  Explanation

• Question 22:

  Refer to the exhibit.

  

  Which type of Cisco VPN is shown for group Cisc012345678?

  A. Cisco AnyConnect Client VPN
  B. DMVPN
  C. Clientless SSLVPN
  D. GETVPN
  A. Cisco AnyConnect Client VPN

  ---

  Explanation

  It is stated client-vpn as the vpn-tunnel-protocol.

• Question 23:

  Refer to the exhibit.

  

  The network security engineer identified that the hub router cannot send traffic to the spoke router. Based on the provided output, which action resolves the issue?

  A. Permit UDP ports 500 and 4500 between the hub and spoke.
  B. Correct the next hop server IP address on the spoke router.
  C. Ensure the preshared key on the hub-and-spoke router matches.
  D. Adjust the ip nhrp network-id command on the hub router.
  B. Correct the next hop server IP address on the spoke router.

  ---

  Explanation

• Question 24:

  Refer to the exhibit.

  

  A Cisco ASA is configured as a client to a router running as a FlexVPN server. The router is configured with a virtual template to terminate FlexVPN clients. Traffic between networks 192.168.0.0/24 and 172.16.20.0/24 does not work as expected. Based on the show crypto ikev2 sa output collected from the Cisco ASA in the exhibit, what is the solution to this issue?

  A. Modify the crypto ACL on the router to permit network 192.168.0.0/24 to network 172.16.20.0/24.
  B. Modify the crypto ACL on the ASA to permit network 192.168.0.0/24 to network 172.16.20.0/24.
  C. Modify the crypto ACL on the ASA to permit network 172.16.20.0/24 to network 192.168.0.0/24.
  D. Modify the crypto ACL on the router to permit network 172.16.20.0/24 to network 192.168.0.0/24.
  B. Modify the crypto ACL on the ASA to permit network 192.168.0.0/24 to network 172.16.20.0/24.

  ---

  Explanation

• Question 25:

  Cisco AnyConnect Secure Mobility Client has been configured to use IKEv2 for one group of users and SSL for another group.

  When the administrator configures a new AnyConnect release on the Cisco ASA, the IKEv2 users cannot download it automatically when they connect. What might be the problem?

  A. The XML profile is not configured correctly for the affected users.
  B. The new client image does not use the same major release as the current one.
  C. Client services are not enabled.
  D. Client software updates are not supported with IKEv2.
  C. Client services are not enabled.

  ---

  Explanation

  On ASDM, under connection profile -> access interfaces -> IPSEC (IKEv2) Access : you can check or uncheck the boxes for "allow access" and "enable client access"

• Question 26:

  Refer to the exhibit.

  

  Upon setting up a tunnel between two sites, users are complaining that connections to applications over the VPN are not working consistently. The output of show crypto ipsec sa was collected on one of the VPN devices. Based on this output, what should be done to fix this issue?

  A. Lower the tunnel MTU.
  B. Enable perfect forward secrecy.
  C. Specify the application networks in the remote identity.
  D. Make an adjustment to IPSec replay window.
  D. Make an adjustment to IPSec replay window.

  ---

  Explanation

• Question 27:

  A network engineer configured Secure Client VPN for a vendor to provide access to internal resources for a migration project. A pool of 192.168.100.0/28 has been assigned and a local database for user authentications has been configured. An image of Cisco Secure Client Client 4.7 for Windows has also been added. The vendor allocated 10 engineers to the project, and all users were able to connect to the corporate resources. After some time, the vendor added another six resources to the project. After this change, engineers from the vendor reported frequent disconnections.

  Which action resolves the issue?

  A. Add the new users to the local database on the ASA.
  B. Increase the amount of IP addresses in the pool.
  C. Allocate more Cisco Secure Client licenses to the ASA.
  D. Upgrade new users to Cisco Secure Client 4.7.
  B. Increase the amount of IP addresses in the pool.

  ---

  Explanation

• Question 28:

  A user is experiencing delays on audio calls over a Cisco AnyConnect VPN. Which implementation step resolves this issue?

  A. Change to 3DES Encryption.
  B. Shorten the encryption key lifetime.
  C. Install the Cisco AnyConnect 2.3 client for the user to download.
  D. Enable DTLS.
  D. Enable DTLS.

  ---

  Explanation

• Question 29:

  Which two protocols does DMVPN leverage to build dynamic VPNs to multiple destinations? (Choose two.)

  A. IKEv2
  B. NHRP
  C. mGRE
  D. mBGP
  E. GDOI
  B. NHRP
  C. mGRE

  ---

  Explanation

• Question 30:

  Refer to the exhibit.

  

  Which type of VPN is being configured, based on the partial configuration snippet?

  A. GET VPN with COOP key server
  B. GET VPN with dual group member
  C. FlexVPN load balancer
  D. FlexVPN backup gateway
  A. GET VPN with COOP key server

  ---

  Explanation