300-730 Practice Questions

An administrator is setting up Cisco AnyConnect on a Cisco ASA with the requirement that AnyConnect automatically establishes a VPN when a company-owned laptop is connected to the...

Which two protocols does DMVPN leverage to build dynamic VPNs to multiple destinations? (Choose two.)

An engineer is requesting an SSL certificate for a VPN load-balancing cluster in which two Cisco ASAs provide clientless SSL VPN access. The FQDN that users will enter to access th...

Over which two transport mediums is FlexVPN deployed? (Choose two.)

A network engineer must configure the Cisco ASA so that Cisco AnyConnect clients establishing an SSL VPN connection create an additional tunnel for real-time traffic that is sensit...

When troubleshooting FlexVPN spoke-to-spoke tunnels, what should be verified first?

Users are getting untrusted server warnings when they connect to the URL https://asa.lab from their browsers. This URL resolves to 192.168.10.10, which is the IP address for a Cisc...

Refer to the exhibit. An engineer has configured two new VPN tunnels to 172.18.1.1 and 172.19.1.1. However, communication between 10.1.0.10 and 10.1.11.10 does not function. Which...

Refer to the exhibit. A network administrator is setting up Cisco AnyConnect on an ASA headend. When users attempt to connect to the VPN, they are presented with this message. The...

Two Cisco ASAs are set up in a VPN load-balancing configuration to an environment where there are thousands of unique Cisco AnyConnect connections per day. Which scalable IP addres...

Which feature must be disabled in EIGRP for DMVPN spokes to learn routes to other DMVPN spokes?

Which command must be configured on the tunnel interface of a FlexVPN spoke to receive a dynamic IP address from the hub?

Which configuration allows a Cisco ASA to receive an IPsec connection from a peer with an unknown IP address?

An organization wants to implement a site-to-site VPN solution that must be able to support 350 sites with direct communications between all sites, fully encrypt the packet header...

Refer to the exhibit. Which type of VPN tunnel is configured? [Exhibit: Configuration snippet] ``` interface Tunnel119 ip address 172.20.58.7 255.255.0.0 ip mtu 1400 ip tcp adjust-...

A network administrator wants the Cisco ASA to automatically start downloading the Cisco AnyConnect client without prompting the user to select between WebVPN or AnyConnect. Which...

A clientless SSLVPN solution is built for 10 employees on a newly installed Cisco ASA. After a couple of days in production, it has been observed that only the first two users to l...

A Cisco IOS router is reconfigured to connect to an additional DMVPN hub that is a part of a different DMVPN phase 3 cloud . After this change was made, users began to experience p...

Which remote access VPN technology requires transform sets to be explicitly defined?

Refer to the exhibit. Which action must be taken on the IPsec tunnel configuration to resolve the issue? [Exhibit: Console output showing IPsec error messages] ``` March 09 09:39:1...

Refer to the exhibit. The network security engineer identified that the hub router cannot send traffic to the spoke router. Based on the provided output, which action resolves the...

An administrator is deciding which authentication protocol should be implemented for their upcoming Cisco AnyConnect deployment. A list of the security requirements from upper mana...

A network administrator is deploying a Cisco IPS appliance and needs it to operate initially without affecting traffic flows. It must also collect data to provide a baseline of unw...

An engineer must investigate a connectivity issue and decides to use the packet capture feature on Cisco FTD. The goal is to see the real packet going through the Cisco FTD device...

Which configuration sets up spoke-to-spoke dynamic tunnels of FlexVPN?

Which two dynamic routing protocols work over FlexVPN for failover redundancy? (Choose two.)

What are the two AAA methods for user authentication when configuring the IKEv2 profile? (Choose two.)

Refer to the exhibit. An engineer must configure a FlexVPN site-to-site GRE tunnel that uses IPsec between two Cisco routers. The indicated configuration was applied on Router_B, b...

A network administrator is troubleshooting an IPSec Site-to-Site VPN tunnel on a Cisco ASA firewall. The VPN tunnel is established but is unable to pass traffic between 192.168.10....

Which command is configured Cisco ASA to allow packets from an IPsec tunnel and the payloads to bypass interface ACLs on the firewall?

After a network security administrator configures site-to-site IPsec VPN peer, they receive this error message: `1d00h: %CRYPTO-6-IKMP_MODE_FAILURE: Processing of Main Mode failed...

A network administrator has been handed a VPN configuration with the ip nhrp summary-map command configured. Which type of VPN technology is being used?

What is the default rekey timer for security association pair in the case of IPsec for Cisco ASA?

An engineer must design a VPN solution with this criteria: - Configured on the IOS XE router. - Able to terminate policy-based VPNs from Cisco and non-Cisco devices. - QoS can be a...

Which type of VPN technology is being used when the ssl trust-point <trustpoint name> <interface name> command is configured?

Which two Java-based components for web browsers in clientless SSL VPN sessions are distributed by Cisco? (Choose two.)

What is the role of a tunnel-group configuration of Secure Client remote-access vpn on Cisco ASA?

A network engineer configured Secure Client VPN for a vendor to provide access to internal resources for a migration project. A pool of 192.168.100.0/28 has been assigned and a loc...

Which two Secure Client Advantage and Premier models are available for Cisco Secure Client Remote Access VPN? (Choose two.)

An engineer configures the Group URL feature on a Cisco Secure Firewall ASA. The requirement is to place contractors using Cisco Secure Client to access the network into a limited...

An engineer must design a remote access VPN solution that meet these requirements: - supports users by telecommuters on the go - encrypts user connections to the corporate network...

Two VPN clients have established SSL VPN connections to the outside interface on same Cisco Secure Firewall ASA, but they cannot communicate with each other. Which CLI command must...

Refer to the following configuration exhibit. Which action resolves the issue? ``` aaa authentication login EAP_AUTHc local aaa authorization exec default local aaa authorization n...

Refer to the exhibit. A network security administrator receives this error message after configuring a site-to-site IPsec VPN between two sites What is the solution to this problem...

Refer to the exhibit. A customer has a DMVPN establishment problem between a hub and a spoke router. To troubleshoot this problem, the network administrator checks the traffic coun...

Refer to the exhibit. A network engineer is troubleshooting a new DMVPN configuration. The network connectivity between the hub and spoke is working as it should, but users cannot...

Which state indicates that BFD is missing on a peer when troubleshooting DMVPN?

A network administrator is setting up a Cisco ASA to authenticate clientless SSLVPN users using an internal Microsoft Active Directory server. When the configuration is complete an...

Refer to the exhibit. A new IPsec VPN tunnel has been configured and the security associations do not establish. After running the show crypto isakmp sa command, the output is disp...

Which interface type must be used in an IKEv2 deployment that needs to route non-IP traffic?