Easily To Pass New 300-730 Verified & Correct Answers [Mar 04, 2023 [Q41-Q61]

5/5 - (1 vote)

Easily To Pass New 300-730 Verified & Correct Answers [Mar 04, 2023

Free 300-730 Exam Files Downloaded Instantly

NEW QUESTION 41
Under which section must a bookmark or URL list be configured on a Cisco ASA to be available for clientless SSLVPN users?

tunnel-group (general-attributes)

tunnel-group (webvpn-attributes)

webvpn (group-policy)

webvpn (global configuration)

Section: Remote access VPNs

NEW QUESTION 42

Refer to the exhibit. A site-to-site tunnel between two sites is not coming up. Based on the debugs, what is the cause of this issue?

An authentication failure occurs on the remote peer.

A certificate fragmentation issue occurs between both sides.

UDP 4500 traffic from the peer does not reach the router.

An authentication failure occurs on the router.

Section: Troubleshooting using ASDM and CLI

NEW QUESTION 43
Which VPN does VPN load balancing on the ASA support?

VTI

IPsec site-to-site tunnels

L2TP over IPsec

Cisco AnyConnect

Section: Secure Communications Architectures

NEW QUESTION 44
Which command is used to troubleshoot an IPv6 FlexVPN spoke-to-hub connectivity failure?

show crypto ikev2 sa

show crypto isakmp sa

show crypto gkm

show crypto identity

NEW QUESTION 45
What are two functions of ECDH and ECDSA? (Choose two.)

nonrepudiation

revocation

digital signature

key exchange

encryption

Reference:
https://tools.cisco.com/security/center/resources/next_generation_cryptography

NEW QUESTION 46
After a user configures a connection profile with a bookmark list and tests the clientless SSLVPN connection, all of the bookmarks are grayed out. What must be done to correct this behavior?

Apply the bookmark to the correct group policy.

Specify the correct port for the web server under the bookmark.

Configure a DNS server on the Cisco ASA and verify it has a record for the web server.

Verify HTTP/HTTPS connectivity between the Cisco ASA and the web server.

NEW QUESTION 47
Refer to the exhibit.

Which type of VPN implementation is displayed?

IKEv1 cluster

IKEv2 backup gateway

IKEv2 load balancer

IKEv2 reconnect

NEW QUESTION 48
Refer to the exhibit.

A network engineer is reconfiguring clientless SSLVPN during a maintenance window, and after testing the new configuration, is unable to establish the connection. What must be done to remediate this problem?

Enable client services on the outside interface.

Enable clientless protocol under the group policy.

Enable DTLS under the group policy.

Enable auto sign-on for the user’s IP address.

NEW QUESTION 49
Which benefit of FlexVPN is a limitation of DMVPN using IKEv1?

GRE encapsulation allows for forwarding of non-IP traffic.

IKE implementation can install routes in routing table.

NHRP authentication provides enhanced security.

Dynamic routing protocols can be configured.

NEW QUESTION 50
Which command identifies a Cisco AnyConnect profile that was uploaded to the flash of an IOS router?

svc import profile SSL_profile flash:simos-profile.xml

anyconnect profile SSL_profile flash:simos-profile.xml

crypto vpn anyconnect profile SSL_profile flash:simos-profile.xml

webvpn import profile SSL_profile flash:simos-profile.xml

NEW QUESTION 51
A network engineer must design a remote access solution to allow contractors to access internal servers. These contractors do not have permissions to install applications on their computers. Which VPN solution should be used in this design?

IKEv2 AnyConnect

Clientless

Port forwarding

SSL AnyConnect

NEW QUESTION 52
Drag and drop the code snippets from the right onto the blanks in the configuration to implement FlexVPN. Not all snippets are used.

NEW QUESTION 53
Which method dynamically installs the network routes for remote tunnel endpoints?

policy-based routing

CEF

reverse route injection

route filtering

Reference:
<https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_vpnav/configuration/12-4t/sec-vpn- availability-12-4t-book/sec-rev-rte-inject.html>

NEW QUESTION 54
Refer to the exhibit.

A customer cannot establish an IKEv2 site-to-site VPN tunnel between two Cisco ASA devices. Based on the syslog message, which action brings up the VPN tunnel?

Reduce the maximum SA limit on the local Cisco ASA.

Increase the maximum in-negotiation SA limit on the local Cisco ASA.

Remove the maximum SA limit on the remote Cisco ASA.

Correct the crypto access list on both Cisco ASA devices.

NEW QUESTION 55
Refer to the exhibit.

An engineer is troubleshooting a new GRE over IPsec tunnel. The tunnel is established but the engineer cannot ping from spoke 1 to spoke 2. Which type of traffic is being blocked?

ESP packets from spoke2 to spoke1

ISAKMP packets from spoke2 to spoke1

ESP packets from spoke1 to spoke2

ISAKMP packets from spoke1 to spoke2

NEW QUESTION 56
Which requirement is needed to use local authentication for Cisco AnyConnect Secure Mobility Clients that connect to a FlexVPN server?

use of certificates instead of username and password

EAP-AnyConnect

EAP query-identity

AnyConnect profile

NEW QUESTION 57
Which two features are valid backup options for an IOS FlexVPN client? (Choose two.)

HSRP stateless failover

DNS-based hub resolution

reactivate primary peer

tunnel pivot

need distractor

NEW QUESTION 58
An engineer would like Cisco AnyConnect users to be able to reach servers within the 10.10.0.0/16 subnet while all other traffic is sent out to the Internet. Which IPsec configuration accomplishes this task?

Option A

Option B

Option C

Option D

NEW QUESTION 59
Refer to the exhibit.

An SSL client is connecting to an ASA headend. The session fails with the message “Connection attempt has timed out. Please verify Internet connectivity.” Based on how the packet is processed, which phase is causing the failure?

phase 9: rpf-check

phase 5: NAT

phase 4: ACCESS-LIST

phase 3: UN-NAT

NEW QUESTION 60
An administrator is designing a VPN with a partner’s non-Cisco VPN solution. The partner’s VPN device will negotiate an IKEv2 tunnel that will only encrypt subnets 192.168.0.0/24 going to 10.0.0.0/24. Which technology must be used to meet these requirements?

VTI

crypto map

GETVPN

DMVPN

NEW QUESTION 61
An engineer notices that while an employee is connected remotely, all traffic is being routed to the corporate network. Which split-tunnel policy allows a remote client to use their local provider for Internet access when working from home?

tunnelall

excludeall

tunnelspecified

excludespecified

Loading …