2023 Easy Success Cisco 300-730 Exam in First Try [Q50-Q70]

2023 Easy Success Cisco 300-730 Exam in First Try

Best 300-730 Exam Dumps for the Preparation of Latest Exam Questions

NEW QUESTION 50
Cisco AnyConnect clients need to transfer large files over the VPN sessions. Which protocol provides the best throughput?

A. SSL/TLS
B. L2TP
C. IPsec IKEv1
D. DTLS

Answer: D

NEW QUESTION 51
Which IKE identity does an IOS/IOS-XE headend expect to receive if an IPsec Cisco AnyConnect client uses default settings?

A. *$DfltlkeldentityS*
B. *$RemoteAccessVpnClient$*
C. *$AnyConnectClient$*
D. *$SecureMobilityClient$*

Answer: C

Explanation:
Section: Remote access VPNs
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/security/flexvpn/200555-FlexVPN-AnyConnect- IKEv2-Remote-Access.html

NEW QUESTION 52
Which two features provide headend resiliency for Cisco AnyConnect clients? (Choose two.)

A. AnyConnect Auto Reconnect
B. AnyConnect Network Access Manager
C. AnyConnect Backup Servers
D. AnyConnect Always On
E. ASA failover

Answer: C,E

Explanation:
Section: Remote access VPNs

NEW QUESTION 53
Refer to the exhibit.

A customer cannot establish an IKEv2 site-to-site VPN tunnel between two Cisco ASA devices. Based on the syslog message, which action brings up the VPN tunnel?

A. Reduce the maximum SA limit on the local Cisco ASA.
B. Increase the maximum in-negotiation SA limit on the local Cisco ASA.
C. Correct the crypto access list on both Cisco ASA devices.
D. Remove the maximum SA limit on the remote Cisco ASA.

Answer: B

NEW QUESTION 54
Under which section must a bookmark or URL list be configured on a Cisco ASA to be available for clientless SSLVPN users?

A. webvpn (group-policy)
B. webvpn (global configuration)
C. tunnel-group (general-attributes)
D. tunnel-group (webvpn-attributes)

Answer: B

Explanation:
Section: Remote access VPNs
Explanation/Reference:

NEW QUESTION 55
Which requirement is needed to use local authentication for Cisco AnyConnect Secure Mobility Clients that connect to a FlexVPN server?

A. EAP query-identity
B. EAP-AnyConnect
C. AnyConnect profile
D. use of certificates instead of username and password

Answer: C

Explanation:
Section: Remote access VPNs
Explanation
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/security/flexvpn/200555-FlexVPN-AnyConnect-IKEv2- Remote-Access.html

NEW QUESTION 56
Which technology and VPN component allows a VPN headend to dynamically learn post NAT IP addresses of remote routers at different sites?

A. DMVPN with ISAKMP
B. GETVPN with ISAKMP
C. DMVPN with NHRP
D. GETVPN with NHRP

Answer: C

NEW QUESTION 57
Which method dynamically installs the network routes for remote tunnel endpoints?

A. CEF
B. route filtering
C. policy-based routing
D. reverse route injection

Answer: D

Explanation:
Section: Site-to-site Virtual Private Networks on Routers and Firewalls Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_vpnav/configuration/12-4t/sec-vpn- availability-12-4t-book/sec-rev-rte-inject.html

NEW QUESTION 58
Which VPN does VPN load balancing on the ASA support?

A. L2TP over IPsec
B. IPsec site-to-site tunnels
C. Cisco AnyConnect
D. VTI

Answer: C

NEW QUESTION 59
Which IKE identity does an IOS/IOS-XE headend expect to receive if an IPsec Cisco AnyConnect client uses default settings?

A. *$DfltlkeldentityS*
B. *$RemoteAccessVpnClient$*
C. *$AnyConnectClient$*
D. *$SecureMobilityClient$*

Answer: C

NEW QUESTION 60
Which two parameters help to map a VPN session to a tunnel group without using the tunnel-group list? (Choose two.)

A. AnyConnect client version
B. group-url
C. group-alias
D. optimal gateway selection
E. certificate map

Answer: B,E

NEW QUESTION 61
Refer to the exhibit.

A network engineer is configuring a remote access SSLVPN and is unable to complete the connection using local credentials. What must be done to remediate this problem?

A. Change the authentication method to local.
B. Enable the client protocol in the Cisco AnyConnect profile.
C. Configure the group policy to force local authentication.
D. Configure a AAA server group to authenticate the client.

Answer: B

NEW QUESTION 62
What uses an Elliptic Curve key exchange algorithm?

A. AES-GCM
B. ECDHE
C. ECDSA
D. SHA

Answer: B

Explanation:
Section: Secure Communications Architectures
Explanation
Explanation/Reference: https://blog.cloudflare.com/a-relatively-easy-to-understand-primer-on-elliptic-curve-cryptography/

NEW QUESTION 63
Which redundancy protocol must be implemented for IPsec stateless failover to work?

A. HSRP
B. VRRP
C. SSO
D. GLBP

Answer: A

Explanation:
Reference:
https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/17826- ipsec-feat.html

NEW QUESTION 64
Refer to the exhibit.

An SSL client is connecting to an ASA headend. The session fails with the message "Connection attempt has timed out. Please verify Internet connectivity." Based on how the packet is processed, which phase is causing the failure?

A. phase 5: NAT
B. phase 9: rpf-check
C. phase 4: ACCESS-LIST
D. phase 3: UN-NAT

Answer: D

NEW QUESTION 65
Refer to the exhibit.

The DMVPN tunnel is dropping randomly and no tunnel protection is configured. Which spoke configuration mitigates tunnel drops?

A. Option B
B. Option A
C. Option C
D. Option D

Answer: D

NEW QUESTION 66
Which command automatically initiates a smart tunnel when a user logs in to the WebVPN portal page?

A. auto-run
B. auto-upgrade
C. auto-connect
D. auto-start

Answer: D

NEW QUESTION 67

Refer to the exhibit. Cisco AnyConnect must be set up on a router to allow users to access internal servers
192.168.0.10 and 192.168.0.11. All other traffic should go out of the client's local NIC. Which command accomplishes this configuration?

A. svc split exclude 192.168.0.0 255.255.255.0
B. svc split include acl CCNP
C. svc split include 192.168.0.0 255.255.255.0
D. svc split exclude acl CCNP

Answer: B

Explanation:
Section: Secure Communications Architectures
Explanation/Reference:

NEW QUESTION 68

Refer to the exhibit. An SSL client is connecting to an ASA headend. The session fails with the message
"Connection attempt has timed out. Please verify Internet connectivity." Based on how the packet is processed, which phase is causing the failure?