السؤال #1

Which command automatically initiates a smart tunnel when a user logs in to the WebVPN portal page?

A. auto-upgrade

B. auto-connect

C. auto-start

D. auto-run

عرض الإجابة

اجابة صحيحة: C

السؤال #2

Refer to the exhibit. An engineer is troubleshooting a new GRE over IPsec tunnel. The tunnel is established, but the engineer cannot ping from spoke 1 to spoke 2. Which type of traffic is being blocked?

A. ESP packets from spoke2 to spoke1

B. ISAKMP packets from spoke2 to spoke1

C. ESP packets from spoke1 to spoke2

D. ISAKMP packets from spoke1 to spoke2

عرض الإجابة

اجابة صحيحة: A

السؤال #3

Which two types of web resources or protocols are enabled by default on the Cisco ASA ClientlessSSL VPN portal? (Choose two.)

A. TTP

B. CA (Citrix)

C. NC

D. DP

E. IFS

عرض الإجابة

اجابة صحيحة: AE

السؤال #4

On a FlexVPN hub-and-spoke topology where spoke-to-spoke tunnels are not allowed, which command is needed for the hub to be able to terminate FlexVPNtunnels?

A. interface virtual-access

B. ip nhrp redirect

C. interface tunnel

D. interface virtual-template

عرض الإجابة

اجابة صحيحة: D

السؤال #5

Which command automatically initiates a smart tunnel when a user logs in to the WebVPN portal page?

A. auto-upgrade

B. auto-connect

C. auto-start

D. auto-run

عرض الإجابة

اجابة صحيحة: C

السؤال #6

What is a requirement for smart tunnels to function properly?

A. Java or ActiveX must be enabled on the client machine

B. Applications must be UDP

C. Stateful failover must not be configured

D. The user on the client machine must have admin access

E. Reveal Answer

عرض الإجابة

اجابة صحيحة: A

السؤال #7

Refer to the exhibit. An SSL client is connecting to an ASA headend. The session fails with the message `Connection attempt has timed out. Please verify Internet connectivity.` Based on how the packet is processed, which phase is causing the failure?

A. hase 9: rpf-check

B. hase 5: NAT

C. hase 4: ACCESS-LIST

D. hase 3: UN-NAT

عرض الإجابة

اجابة صحيحة: D

السؤال #8

Which command is used to troubleshoot an IPv6 FlexVPN spoke-to-hub connectivity failure?

A. show crypto ikev2 sa

B. show crypto isakmp sa

C. show crypto gkm

D. show crypto identity

عرض الإجابة

اجابة صحيحة: A

السؤال #9

Refer to the exhibit.What is configured as a result of this command set?

A. lexVPN client profile for IPv6

B. lexVPN server to authorize groups by using an IPv6 external AAA

C. lexVPN server for an IPv6 dVTI session

D. lexVPN server to authenticate IPv6 peers by using EAP

عرض الإجابة

اجابة صحيحة: C

السؤال #10

An engineer is using DMVPN to provide secure connectivity between a data center and remote sites. Which two routing protocols should be used between the routers? (Choose two.)

A. IS-IS

B. BGP

C. RIPv2

D. OSPF

E. EIGRP

عرض الإجابة

اجابة صحيحة: BE

السؤال #11

Which DMVPN feature allows spokes to be deployed with dynamically assigned public IP addresses?

A. 2547oDMVPN

B. NHRP

C. OSPF

D. NAT Traversal

E. Reveal Answer

عرض الإجابة

اجابة صحيحة: B

السؤال #12

Refer to the exhibit. The customer must launch Cisco AnyConnect in the RDP machine. Which IOS configuration accomplishes this task?

A. AOption A

B. BOption B

C. COption C

D. DOption D

عرض الإجابة

اجابة صحيحة: C

السؤال #13

Which two features provide headend resiliency for Cisco AnyConnect clients? (Choose two.)

A. nyConnect Auto Reconnect

B. nyConnect Network Access Manager

C. nyConnect Backup Servers

D. SA failover

E. nyConnect Always On

عرض الإجابة

اجابة صحيحة: CD

السؤال #14

Which requirement is needed to use local authentication for Cisco AnyConnect Secure Mobility Clients that connect to a FlexVPN server?

A. use of certificates instead of username and password

B. EAP-AnyConnect

C. EAP query-identity

D. AnyConnect profile

عرض الإجابة

اجابة صحيحة: D

السؤال #15

Which remote access VPN technology requires the use of the IPsec-proposal configuration option?

A. Aclientless SSLVPN

B. BSSLVPN Full Tunnel

C. CIKEv2-based VPN

D. DIKEv1-based VPN

عرض الإجابة

اجابة صحيحة: C

السؤال #16

In a FlexVPN deployment, the spokes successfully connect to the hub, but spoke-to-spoke tunnels do not form. Which troubleshooting step solves the issue?

A. erify the spoke configuration to check if the NHRP redirect is enabled

B. erify that the spoke receives redirect messages and sends resolution requests

C. erify the hub configuration to check if the NHRP shortcut is enabled

D. erify that the tunnel interface is contained within a VRF

عرض الإجابة

اجابة صحيحة: B

السؤال #17

Which requirement is needed to use local authentication for Cisco AnyConnect Secure Mobility Clients that connect to a FlexVPN server?

A. use of certificates instead of username and password

B. EAP-AnyConnect

C. EAP query-identity

D. AnyConnect profile

عرض الإجابة

اجابة صحيحة: D

السؤال #18

Which requirement is needed to use local authentication for Cisco AnyConnect Secure Mobility Clients that connect to a FlexVPN server?

A. use of certificates instead of username and password

B. EAP-AnyConnect

C. EAP query-identity

D. AnyConnect profile

عرض الإجابة

اجابة صحيحة: D

السؤال #19

Which two changes must be made in order to migrate from DMVPN Phase 2 to Phase 3 when EIGRP is configured? (Choose two.)

A. Add NHRP shortcuts on the hub

B. Add NHRP redirects on the spoke

C. Disable EIGRP next-hop-self on the hub

D. Enable EIGRP next-hop-self on the hub

E. Add NHRP redirects on the hub

عرض الإجابة

اجابة صحيحة: CE

السؤال #20

Refer to the exhibit. An engineer is troubleshooting a new GRE over IPsec tunnel. The tunnel is established, but the engineer cannot ping from spoke 1 to spoke 2. Which type of traffic is being blocked?

A. ESP packets from spoke2 to spoke1

B. ISAKMP packets from spoke2 to spoke1

C. ESP packets from spoke1 to spoke2

D. ISAKMP packets from spoke1 to spoke2

عرض الإجابة

اجابة صحيحة: A

السؤال #21

Which requirement is needed to use local authentication for Cisco AnyConnect Secure Mobility Clients that connect to a FlexVPN server?

A. use of certificates instead of username and password

B. EAP-AnyConnect

C. EAP query-identity

D. AnyConnect profile

عرض الإجابة

اجابة صحيحة: D

السؤال #22

On a FlexVPN hub-and-spoke topology where spoke-to-spoke tunnels are not allowed, which command is needed for the hub to be able to terminate FlexVPN tunnels?

A. nterface virtual-access

B. p nhrp redirect

C. nterface tunnel

D. nterface virtual-template

عرض الإجابة

اجابة صحيحة: D

السؤال #23

Which two NHRP functions are specific to DMVPN Phase 3 implementation? (Choose two.)

A. registration reply

B. redirect

C. resolution reply

D. registration request

E. resolution request

عرض الإجابة

اجابة صحيحة: BE

السؤال #24

Which command is used to troubleshoot an IPv6 FlexVPN spoke-to-hub connectivity failure?

A. show crypto ikev2 sa

B. show crypto isakmp sa

C. show crypto gkm

D. show crypto identity

عرض الإجابة

اجابة صحيحة: A

السؤال #25

Refer to the exhibit. What is configured as a result of this command set?

A. FlexVPN client profile for IPv6

B. FlexVPN server to authorize groups by using an IPv6 external AAA

C. FlexVPN server for an IPv6 dVTI session

D. FlexVPN server to authenticate IPv6 peers by using EAP

عرض الإجابة

اجابة صحيحة: C

السؤال #26

Refer to the exhibit. What is a result of this configuration?

A. poke 1 fails the authentication because the authentication methods are incorrect

B. poke 2 passes the authentication to the hub and successfully proceeds to phase 2

C. poke 2 fails the authentication because the remote authentication method is incorrect

D. poke 1 passes the authentication to the hub and successfully proceeds to phase 2

عرض الإجابة

اجابة صحيحة: A

السؤال #27

Under which section must a bookmark or URL list be configured on a Cisco ASA to be available for clientless SSLVPN users?

A. tunnel-group (general-attributes)

B. tunnel-group (webvpn-attributes)

C. webvpn (group-policy)

D. webvpn (global configuration)

عرض الإجابة

اجابة صحيحة: C

السؤال #28

Refer to the exhibit. An engineer is troubleshooting a new GRE over IPsec tunnel. The tunnel is established, but the engineer cannot ping from spoke 1 to spoke 2. Which type of traffic is being blocked?

A. ESP packets from spoke2 to spoke1

B. ISAKMP packets from spoke2 to spoke1

C. ESP packets from spoke1 to spoke2

D. ISAKMP packets from spoke1 to spoke2

عرض الإجابة

اجابة صحيحة: A

السؤال #29

Which two parameters help to map a VPN session to a tunnel group without using the tunnel-group list? (Choose two.)

A. group-alias

B. certificate map

C. optimal gateway selection

D. group-url

E. AnyConnect client version

عرض الإجابة

اجابة صحيحة: BD

السؤال #30

Which IKE identity does an IOS/IOS-XE headend expect to receive if an IPsec Cisco AnyConnect client uses default settings?

A. *$SecureMobilityClient$*

B. *$AnyConnectClient$*

C. *$RemoteAccessVpnClient$*

D. *$DfltlkeldentityS*

عرض الإجابة

اجابة صحيحة: B

السؤال #31

Cisco AnyConnect Secure Mobility Client has been configured to use IKEv2 for one group of users and SSL for another group. When the administrator configures a new AnyConnect release on the Cisco ASA, the IKEv2 users cannot download it automatically when they connect. What might be the problem?

A. The XML profile is not configured correctly for the affected users

B. The new client image does not use the same major release as the current one

C. Client services are not enabled

D. Client software updates are not supported with IKEv2

عرض الإجابة

اجابة صحيحة: C

السؤال #32

Which IKE identity does an IOS/IOS-XE headend expect to receive if an IPsec Cisco AnyConnect client uses default settings?

A. *$SecureMobilityClient$*

B. *$AnyConnectClient$*

C. *$RemoteAccessVpnClient$*

D. *$DfltlkeldentityS*

عرض الإجابة

اجابة صحيحة: B

السؤال #33

Which requirement is needed to use local authentication for Cisco AnyConnect Secure Mobility Clients that connect to a FlexVPN server?

A. use of certificates instead of username and password

B. EAP-AnyConnect

C. EAP query-identity

D. AnyConnect profile

عرض الإجابة

اجابة صحيحة: D

السؤال #34

Refer to the exhibit. Which value must be configured in the User Group field when the Cisco AnyConnect Profile is created to connect to an ASA headend with IPsec as the primary protocol?

A. Aaddress-pool

B. Bgroup-alias

C. Cgroup-policy

D. Dtunnel-group

عرض الإجابة

اجابة صحيحة: D

السؤال #35

Refer to the exhibit. An engineer is troubleshooting a new GRE over IPsec tunnel. The tunnel is established, but the engineer cannot ping from spoke 1 to spoke 2. Which type of traffic is being blocked?

A. ESP packets from spoke2 to spoke1

B. ISAKMP packets from spoke2 to spoke1

C. ESP packets from spoke1 to spoke2

D. ISAKMP packets from spoke1 to spoke2

عرض الإجابة

اجابة صحيحة: A

السؤال #36

Which requirement is needed to use local authentication for Cisco AnyConnect Secure Mobility Clients that connect to a FlexVPN server?

A. use of certificates instead of username and password

B. EAP-AnyConnect

C. EAP query-identity

D. AnyConnect profile

عرض الإجابة

اجابة صحيحة: D

السؤال #37

Which command is used to troubleshoot an IPv6 FlexVPN spoke-to-hub connectivity failure?

A. show crypto ikev2 sa

B. show crypto isakmp sa

C. show crypto gkm

D. show crypto identity

عرض الإجابة

اجابة صحيحة: A

السؤال #38

Refer to the exhibit. Based on the debug output, which type of mismatch is preventing the VPN from coming up?

A. nteresting traffic

B. ifetime

C. reshared key

D. FS

عرض الإجابة

اجابة صحيحة: A

السؤال #39

Refer to the exhibit. Which two tunnel types produce the show crypto ipsec sa output seen in the exhibit? (Choose two.)

A. crypto map

B. DMVPN

C. GRE

D. FlexVPN

E. VTI

عرض الإجابة

اجابة صحيحة: BE

السؤال #40

Refer to the exhibit.The DMVPN tunnel is dropping randomly and no tunnel protection is configured. Which spoke configuration mitigates tunnel drops?

A. Option A

B. Option B

C. Option C

D. Option D

عرض الإجابة

اجابة صحيحة: C

السؤال #41

Where must an engineer configure a preshared key for a site-to-site VPN tunnel configured on a Cisco ASA?

A. isakmp policy

B. group policy

C. crypto map

D. tunnel group

E. Reveal Answer

عرض الإجابة

اجابة صحيحة: D

السؤال #42

Refer to the exhibit. An engineer is troubleshooting a new GRE over IPsec tunnel. The tunnel is established, but the engineer cannot ping from spoke 1 to spoke 2. Which type of traffic is being blocked?

A. ESP packets from spoke2 to spoke1

B. ISAKMP packets from spoke2 to spoke1

C. ESP packets from spoke1 to spoke2

D. ISAKMP packets from spoke1 to spoke2

عرض الإجابة

اجابة صحيحة: A

السؤال #43

Refer to the exhibit.The customer must launch Cisco AnyConnect in the RDP machine. Which IOS configuration accomplishes this task?

A. Option A

B. Option B

C. Option C

D. Option D

عرض الإجابة

اجابة صحيحة: C

السؤال #44

Which IKE identity does an IOS/IOS-XE headend expect to receive if an IPsec Cisco AnyConnect client uses default settings?

A. *$SecureMobilityClient$*

B. *$AnyConnectClient$*

C. *$RemoteAccessVpnClient$*

D. *$DfltlkeldentityS*

عرض الإجابة

اجابة صحيحة: B

السؤال #45

Which command is used to troubleshoot an IPv6 FlexVPN spoke-to-hub connectivity failure?

A. show crypto ikev2 sa

B. show crypto isakmp sa

C. show crypto gkm

D. show crypto identity

عرض الإجابة

اجابة صحيحة: A

السؤال #46

Which IKE identity does an IOS/IOS-XE headend expect to receive if an IPsec Cisco AnyConnect client uses default settings?

A. *$SecureMobilityClient$*

B. *$AnyConnectClient$*

C. *$RemoteAccessVpnClient$*

D. *$DfltlkeldentityS*

عرض الإجابة

اجابة صحيحة: B

السؤال #47

Users cannot log in to a Cisco ASA using clientless SSLVPN. Troubleshooting reveals the error message "WebVPN session terminated: Client type not supported". Which step does the administrator take to resolve this issue?

A. ncrease the simultaneous logins on the group policy

B. nable the Cisco AnyConnect premium license on the Cisco ASA

C. nable the clientless VPN protocol on the group policy

D. ave the user upgrade to a supported browser

عرض الإجابة

اجابة صحيحة: C

السؤال #48

Which IKE identity does an IOS/IOS-XE headend expect to receive if an IPsec Cisco AnyConnect client uses default settings?

A. *$SecureMobilityClient$*

B. *$AnyConnectClient$*

C. *$RemoteAccessVpnClient$*

D. *$DfltlkeldentityS*

عرض الإجابة

اجابة صحيحة: B

السؤال #49

On a FlexVPN hub-and-spoke topology where spoke-to-spoke tunnels are not allowed, which command is needed for the hub to be able to terminate FlexVPN tunnels?

A. interface virtual-access

B. ip nhrp redirect

C. interface tunnel

D. interface virtual-template

عرض الإجابة

اجابة صحيحة: C

السؤال #50

Which command is used to troubleshoot an IPv6 FlexVPN spoke-to-hub connectivity failure?

A. show crypto ikev2 sa

B. show crypto isakmp sa

C. show crypto gkm

D. show crypto identity

عرض الإجابة

اجابة صحيحة: A

السؤال #51

Which IKE identity does an IOS/IOS-XE headend expect to receive if an IPsec Cisco AnyConnect client uses default settings?

A. *$SecureMobilityClient$*

B. *$AnyConnectClient$*

C. *$RemoteAccessVpnClient$*

D. *$DfltlkeldentityS*

عرض الإجابة

اجابة صحيحة: B

السؤال #52

Which method dynamically installs the network routes for remote tunnel endpoints?

A. policy-based routing

B. CEF

C. reverse route injection

D. route filtering

عرض الإجابة

اجابة صحيحة: C

السؤال #53

Which two statements about the Cisco ASA Clientless SSL VPN solution are true? (Choose two.)

A. When a client connects to the Cisco ASA WebVPN portal and tries to access HTTP resources through the URL bar, the client uses the local DNS to perform FQDN resolution

B. The rewriter enable command under the global webvpn configuration enables the rewriter functionality because that feature is disabled by default

C. A Cisco ASA can simultaneously allow Clientless SSL VPN sessions and AnyConnect client sessions

D. When a client connects to the Cisco ASA WebVPN portal and tries to access HTTP resources through the URL bar, the ASA uses its configured DNS servers to perform FQDN resolution

E. Clientless SSLVPN provides Layer 3 connectivity into the secured network

عرض الإجابة

اجابة صحيحة: CD

السؤال #54

Refer to the exhibit. Which VPN technology is allowed for users connecting to the Employee tunnel group?

A. SSL AnyConnect

B. IKEv2 AnyConnect

C. crypto map

D. clientless

عرض الإجابة

اجابة صحيحة: D

السؤال #55

Refer to the exhibit. The customer can establish a Cisco AnyConnect connection without using an XML profile. When the host "ikev2" is selected in theAnyConnect drop down, the connection fails. What is the cause of this issue?

A. he HostName is incorrect

B. he IP address is incorrect

C. rimary protocol should be SSL

D. serGroup must match connection profile

عرض الإجابة

اجابة صحيحة: D

السؤال #56

What are two differences between ECC and RSA? (Choose two.)

A. Key generation in ECC is slower and more CPU intensive than RSA

B. ECC can have the same security as RSA but with a shorter key size

C. ECC cannot have the same security as RSA, even with an increased key size

D. Key generation in ECC is faster and less CPU intensive than RSA

E. ECC lags in performance when compared with RSA

عرض الإجابة

اجابة صحيحة: BD

السؤال #57

Which requirement is needed to use local authentication for Cisco AnyConnect Secure Mobility Clients that connect to a FlexVPN server?

A. use of certificates instead of username and password

B. EAP-AnyConnect

C. EAP query-identity

D. AnyConnect profile

E. Reveal Answer

عرض الإجابة

اجابة صحيحة: B

السؤال #58

Refer to the exhibit.Based on the exhibit, why are users unable to access CCNP Webserver bookmark?

A. he URL is being blocked by a WebACL

B. he ASA cannot resolve the URL

C. he bookmark has been disabled

D. he user cannot access the URL

عرض الإجابة

اجابة صحيحة: B

السؤال #59

An organization wants to distribute remote access VPN load across 12 VPN headend locations supporting 25,000 simultaneous users. Which load balancing method meets this requirement?

A. one VPN profile per site

B. DNS-based load balancing

C. AnyConnect native load balancing

D. equal cost, multipath load balancing

عرض الإجابة

اجابة صحيحة: B

السؤال #60

A second set of traffic selectors is negotiated between two peers using IKEv2. Which IKEv2 packet will contain details of the exchange?

A. KEv2 IKE_SA_INIT

B. KEv2 INFORMATIONAL

C. KEv2 CREATE_CHILD_SA

D. KEv2 IKE_AUTH

عرض الإجابة

اجابة صحيحة: C

السؤال #61

Refer to the exhibit. Which VPN technology is allowed for users connecting to the Employee tunnel group?

A. SSL AnyConnect

B. IKEv2 AnyConnect

C. crypto map

D. clientless

عرض الإجابة

اجابة صحيحة: D

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان

View The Updated 300-730 Exam Questions

عرض الإجابات بعد التقديم

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع! احصل الان

View The Updated 300-730 Exam Questions

عرض الإجابات بعد التقديم

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان