Read Online 300-730 Test Practice Test Questions Exam Dumps [Q40-Q61] : Actual Test Materials : http://blog.actualtests4sure.com

NO.40 Which parameter must match on all routers in a DMVPN Phase 3 cloud?

GRE tunnel key

NHRP network ID

tunnel VRF

EIGRP split-horizon setting

NO.41 Which redundancy protocol must be implemented for IPsec stateless failover to work?

SSO

GLBP

HSRP

VRRP

NO.42 Which parameter is initially used to elect the primary key server from a group of key servers?

code version

highest IP address

highest-priority value

lowest IP address

NO.43 An engineer would like Cisco AnyConnect users to be able to reach servers within the 10.10.0.0/16 subnet while all other traffic is sent out to the Internet. Which IPsec configuration accomplishes this task?

Option A

Option B

Option C

Option D

NO.44 Refer to the exhibit.

What is a result of this configuration?

Spoke 1 fails the authentication because the authentication methods are incorrect.

Spoke 2 passes the authentication to the hub and successfully proceeds to phase 2.

Spoke 2 fails the authentication because the remote authentication method is incorrect.

Spoke 1 passes the authentication to the hub and successfully proceeds to phase 2.

NO.45 An engineer notices that while an employee is connected remotely, all traffic is being routed to the corporate network. Which split-tunnel policy allows a remote client to use their local provider for Internet access when working from home?

tunnelall

excludeall

tunnelspecified

excludespecified

NO.46 An engineer would like Cisco AnyConnect users to be able to reach servers within the
10.10.0.0/16 subnet while all other traffic is sent out to the Internet. Which IPsec configuration accomplishes this task?

NO.47 Refer to the exhibit.

A network engineer is reconfiguring clientless SSLVPN during a maintenance window, and after testing the new configuration, is unable to establish the connection. What must be done to remediate this problem?

Enable client services on the outside interface.

Enable clientless protocol under the group policy.

Enable DTLS under the group policy.

Enable auto sign-on for the user’s IP address.

NO.48 Which feature allows a DMVPN Phase 3 spoke to switch to an alternate hub when the primary hub is unreachable?

multicast PIM

backup NHS

per-tunnel jitter probes

NHRP shortcut

NO.49 Refer to the exhibit.

A network administrator is setting up a phone VPN on a Cisco ASA. The phone cannot connect and the error is presented in a debug on the Cisco ASA. Which action fixes this issue?

Enable web-deploy of the posture module so that the module can be downloaded from the Cisco ASA to an IP phone.

Configure the Cisco ASA to present an RSA certificate to the phone for authentication.

Disable Cisco Secure Desktop under the connection profile VPNPhone.

Install the posture module on the Cisco ASA.

NO.50 Refer to the exhibit. A network engineer is reconfiguring clientless SSLVPN during a maintenance window, and after testing the new configuration, is unable to establish the connection. What must be done to remediate this problem?

Enable client services on the outside interface.

Enable clientless protocol under the group policy.

Enable DTLS under the group policy.

Enable auto sign-on for the user’s IP address.

NO.51 A company needs to ensure only corporate issued laptops and devices are allowed to connect with the Cisco AnyConnect client. The solution should be applicable to multiple operating systems, including Windows, MacOS, and Linux, and should allow for remote remediation if a corporate issued device is stolen. Which solution should be used to accomplish these goals?

Use a DAP registry check on the system to determine the relationship with the corporate domain.

Use a DAP file check on the system to determine the relationship with the corporate domain.

Install and authenticate user certificates on the corporate devices.

Install and authenticate machine certificates on the corporate devices

NO.52 In a FlexVPN deployment, the spokes successfully connect to the hub, but spoke-to-spoke tunnels do not form. Which troubleshooting step solves the issue?

Verify the spoke configuration to check if the NHRP redirect is enabled.

Verify that the spoke receives redirect messages and sends resolution requests.

Verify the hub configuration to check if the NHRP shortcut is enabled.

Verify that the tunnel interface is contained within a VRF.

NO.53 Which two commands help determine why the NHRP registration process is not being completed even after the IPsec tunnel is up? (Choose two.)

show crypto isakmp sa

show ip traffic

show crypto ipsec sa

show ip nhrp traffic

show dmvpn detail

NO.54 Refer to the exhibit.

An IKEv2 site-to-site tunnel between an ASA and a remote peer is not building successfully. What will fix the problem based on the debug output?

Ensure crypto IPsec policy matches on both VPN devices.

Install the correct certificate to validate the peer.

Correct crypto access list on both VPN devices.

Specify the peer IP address in the tunnel group name.

NO.55 Refer to the exhibit.

Which VPN technology is used in the exhibit?

DVTI

VTI

DMVPN

GRE

NO.56 –
Drag and drop the GET VPN components from the left onto the correct descriptions on the right.

NO.57 Where must an engineer configure a preshared key for a site-to-site VPN tunnel configured on a Cisco ASA?

isakmp policy

group policy

crypto map

tunnel group

NO.58 A DMVPN spoke router tunnel is up and passing traffic, but it cannot establish an EIGRP neighbor relationship with the hub router. Which solution resolves this issue?

Enable EIGRP Split Horizon on the hub tunnel interface.

Remove the EIGRP stub configuration on the spoke tunnel interface.

Enable the EIGRP next hop self feature on the hub tunnel interface.

Configure the dynamic NHRP multicast map on the hub tunnel interface.

NO.59 Refer to the exhibit.

Upon setting up a tunnel between two sites, users are complaining that connections to applications over the VPN are not working consistently. The output of show crypto ipsec sa was collected on one of the VPN devices. Based on this output, what should be done to fix this issue?

Lower the tunnel MTU.

Enable perfect forward secrecy.

Specify the application networks in the remote identity.

Make an adjustment to IPSec replay window.

NO.60 Which benefit of FlexVPN is a limitation of DMVPN using IKEv1?

GRE encapsulation allows for forwarding of non-IP traffic.

IKE implementation can install routes in routing table.

NHRP authentication provides enhanced security.

Dynamic routing protocols can be configured.

NO.61 Which technology is used to send multicast traffic over a site-to-site VPN?

GRE over IPsec on IOS router

GRE over IPsec on FTD

IPsec tunnel on FTD

GRE tunnel on ASA