Top Tips Of Renew 300-730 Test Preparation

NEW QUESTION 1
Refer to the exhibit.

Which two commands under the tunnel-group webvpn-attributes result in a Cisco AnyConnect user receiving the AnyConnect prompt in the exhibit? (Choose two.)

• A. group-url https://172.16.31.10/General enable
• B. group-policy General internal
• C. authentication aaa
• D. authentication certificate
• E. group-alias General enable

Answer: BE

NEW QUESTION 2
Which two types of web resources or protocols are enabled by default on the Cisco ASA Clientless SSL VPN portal? (Choose two.)

• A. HTTP
• B. ICA (Citrix)
• C. VNC
• D. RDP
• E. CIFS

Answer: DE

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa94/config-guides/cli/vpn/asa-94-vpn-config/webvpn-configure-gateway.html

NEW QUESTION 3
Which two commands help determine why the NHRP registration process is not being completed even after the IPsec tunnel is up? (Choose two.)

• A. show crypto isakmp sa
• B. show ip traffic
• C. show crypto ipsec sa
• D. show ip nhrp traffic
• E. show dmvpn detail

Answer: AD

NEW QUESTION 4
Which command identifies a Cisco AnyConnect profile that was uploaded to the flash of an IOS router?

• A. svc import profile SSL_profile flash:simos-profile.xml
• B. anyconnect profile SSL_profile flash:simos-profile.xml
• C. crypto vpn anyconnect profile SSL_profile flash:simos-profile.xml
• D. webvpn import profile SSL_profile flash:simos-profile.xml

Answer: C

Explanation:
Reference: https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/200533-AnyConnect-Configure-Basic-SSLVPN-for-I.html

NEW QUESTION 5
Which parameter is initially used to elect the primary key server from a group of key servers?

• A. code version
• B. highest IP address
• C. highest-priority value
• D. lowest IP address

Answer: C

Explanation:
Reference: https://www.cisco.com/c/en/us/products/collateral/security/group-encrypted-transport-vpn/deployment_guide_c07_554713.html

NEW QUESTION 6
Which feature allows the ASA to handle nonstandard applications and web resources so that they display correctly over a clientless SSL VPN connection?

• A. single sign-on
• B. Smart Tunnel
• C. WebType ACL
• D. plug-ins

Answer: B

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/vpn_clientless_ssl.html#29951

NEW QUESTION 7
Refer to the exhibit.

Based on the exhibit, why are users unable to access CCNP Webserver bookmark?

• A. The URL is being blocked by a WebACL.
• B. The ASA cannot resolve the URL.
• C. The bookmark has been disabled.
• D. The user cannot access the URL.

Answer: C

NEW QUESTION 8
Which feature of GETVPN is a limitation of DMVPN and FlexVPN?

• A. sequence numbers that enable scalable replay checking
• B. enabled use of ESP or AH
• C. design for use over public or private WAN
• D. no requirement for an overlay routing protocol

Answer: D

NEW QUESTION 9
Refer to the exhibit.

An engineer is troubleshooting a new GRE over IPsec tunnel. The tunnel is established but the engineer cannot ping from spoke 1 to spoke 2. Which type of traffic is being blocked?

• A. ESP packets from spoke2 to spoke1
• B. ISAKMP packets from spoke2 to spoke1
• C. ESP packets from spoke1 to spoke2
• D. ISAKMP packets from spoke1 to spoke2

Answer: A

NEW QUESTION 10
Which technology is used to send multicast traffic over a site-to-site VPN?

• A. GRE over IPsec on IOS router
• B. GRE over IPsec on FTD
• C. IPsec tunnel on FTD
• D. GRE tunnel on ASA

Answer: B

NEW QUESTION 11
Which requirement is needed to use local authentication for Cisco AnyConnect Secure Mobility Clients that connect to a FlexVPN server?

• A. use of certificates instead of username and password
• B. EAP-AnyConnect
• C. EAP query-identity
• D. AnyConnect profile

Answer: D

Explanation:
Reference: https://www.cisco.com/c/en/us/support/docs/security/flexvpn/200555-FlexVPN-AnyConnect-IKEv2-Remote-Access.html

NEW QUESTION 12
Refer to the exhibit.

Which VPN technology is used in the exhibit?

• A. DVTI
• B. VTI
• C. DMVPN
• D. GRE

Answer: B

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_vpnips/configuration/zZ-Archive/IPsec_Virtual_Tunnel_Interface.html#GUID-EB8C433B-2394-42B9-997F-B40803E58A91

NEW QUESTION 13
Refer to the exhibit.

The customer must launch Cisco AnyConnect in the RDP machine. Which IOS configuration accomplishes this task?

• A.
• B.
• C.
• D.

Answer: C

Explanation:
Reference: https://community.cisco.com/t5/vpn/starting-anyconnect-vpn-through-rdp-session-on-cisco-891/td-p/2128284

NEW QUESTION 14
Refer to the exhibit.

The DMVPN tunnel is dropping randomly and no tunnel protection is configured. Which spoke configuration mitigates tunnel drops?
A.

• A.
• B. D.

Answer: D

NEW QUESTION 15
Which two statements about the Cisco ASA Clientless SSL VPN solution are true? (Choose two.)

• A. When a client connects to the Cisco ASA WebVPN portal and tries to access HTTP resources through the URL bar, the client uses the local DNS to perform FQDN resolution.
• B. The rewriter enable command under the global webvpn configuration enables the rewriter functionality because that feature is disabled by default.
• C. A Cisco ASA can simultaneously allow Clientless SSL VPN sessions and AnyConnect client sessions.
• D. When a client connects to the Cisco ASA WebVPN portal and tries to access HTTP resources through the URL bar, the ASA uses its configured DNS servers to perform FQDN resolution.
• E. Clientless SSLVPN provides Layer 3 connectivity into the secured network.

Answer: CD

NEW QUESTION 16
Refer to the exhibit.

The IKEv2 site-to-site VPN tunnel between two routers is down. Based on the debug output, which type of mismatch is the problem?

• A. preshared key
• B. peer identity
• C. transform set
• D. ikev2 proposal

Answer: B

NEW QUESTION 17
Refer to the exhibit.

All internal clients behind the ASA are port address translated to the public outside interface that has an IP address of 3.3.3.3. Client 1 and client 2 have established successful SSL VPN connections to the ASA. What must be implemented so that "3.3.3.3" is returned from a browser search on the IP address?

• A. Same-security-traffic permit inter-interface under Group Policy
• B. Exclude Network List Below under Group Policy
• C. Tunnel All Networks under Group Policy
• D. Tunnel Network List Below under Group Policy

Answer: D

NEW QUESTION 18
A Cisco AnyConnect client establishes a SSL VPN connection with an ASA at the corporate office. An engineer must ensure that the client computer meets the enterprise security policy. Which feature can update the client to meet an enterprise security policy?

• A. Endpoint Assessment
• B. Cisco Secure Desktop
• C. Basic Host Scan
• D. Advanced Endpoint Assessment

Answer: D

NEW QUESTION 19
Which configuration construct must be used in a FlexVPN tunnel?

• A. EAP configuration
• B. multipoint GRE tunnel interface
• C. IKEv1 policy
• D. IKEv2 profile

Answer: D

NEW QUESTION 20
Which statement about GETVPN is true?

• A. The configuration that defines which traffic to encrypt originates from the key server.
• B. TEK rekeys can be load-balanced between two key servers operating in COOP.
• C. The pseudotime that is used for replay checking is synchronized via NTP.
• D. Group members must acknowledge all KEK and TEK rekeys, regardless of configuration.

Answer: A

NEW QUESTION 21
On a FlexVPN hub-and-spoke topology where spoke-to-spoke tunnels are not allowed, which command is needed for the hub to be able to terminate FlexVPN tunnels?

• A. interface virtual-access
• B. ip nhrp redirect
• C. interface tunnel
• D. interface virtual-template

Answer: D

NEW QUESTION 22
......