2024 300-730 Dumps PDF – 300-730 Real Exam Questions Answers [Q55-Q75]

NEW QUESTION 55
A network engineer is configuring a server. The router will terminate encrypted VPN connections on g0/0, which is in the VRF “Internet”. The clear-text traffic that must be encrypted before being sent out traverses g0/1, which is in the VRF “Internal”. Which two VRF-specific configurations allow VPN traffic to traverse the VRF-aware interfaces? (Choose two.)

Under the IKEv2 profile, add the ivrf Internal command.

Under the virtual-template interface, add the ip vrf forwarding Internet command.

Under the IKEv2 profile, add the match fvrf Internal command.

Under the IKEv2 profile, add the match fvrf Internet command.

Under the virtual-template interface, add the tunnel vrf Internet command.

NEW QUESTION 56

Refer to the exhibit. The customer can establish a Cisco AnyConnect connection without using an XML profile.
When the host “ikev2” is selected in the AnyConnect drop down, the connection fails. What is the cause of this issue?

The HostName is incorrect.

The IP address is incorrect.

Primary protocol should be SSL.

UserGroup must match connection profile.

NEW QUESTION 57
Refer to the exhibit.

Which two tunnel types produce the show crypto ipsec sa output seen in the exhibit? (Choose two.)

crypto map

DMVPN

GRE

FlexVPN

VTI

NEW QUESTION 58
Which remote access VPN technology requires the use of the IPsec-proposal configuration option?

clientless SSLVPN

SSLVPN Full Tunnel

IKEv2-based VPN

IKEv1-based VPN

NEW QUESTION 59
Refer to the exhibit.

Which VPN technology is used in the exhibit?

DVTI

VTI

DMVPN

GRE

NEW QUESTION 60
A network engineer must design a clientless VPN solution for a company. VPN users must be able to access several internal web servers. When reachability to those web servers was tested, it was found that one website is not being rewritten correctly by the ASA.
What is a potential solution for this issue while still allowing it to be a clientless VPN setup?

Set up a smart tunnel with the IP address of the web server.

Set up a NAT rule that translates the ASA public address to the web server private address on port 80.

Set up Cisco AnyConnect with a split tunnel that has the IP address of the web server.

Set up a WebACL to permit the IP address of the web server.

NEW QUESTION 61
Which command is used to troubleshoot an IPv6 FlexVPN spoke-to-hub connectivity failure?

show crypto ikev2 sa

show crypto isakmp sa

show crypto gkm

show crypto identity

NEW QUESTION 62
Refer to the exhibit.

Upon setting up a tunnel between two sites, users are complaining that connections to applications over the VPN are not working consistently. The output of show crypto ipsec sa was collected on one of the VPN devices. Based on this output, what should be done to fix this issue?

Lower the tunnel MTU.

Enable perfect forward secrecy.

Specify the application networks in the remote identity.

Make an adjustment to IPSec replay window.

NEW QUESTION 63
Refer to the exhibit.

Client 1 cannot communicate with client 2. Both clients are using Cisco AnyConnect and have established a successful SSL VPN connection to the hub ASA. Which command on the ASA is missing?

dns-server value 10.1.1.2

same-security-traffic permit intra-interface

same-security-traffic permit inter-interface

dns-server value 10.1.1.3

NEW QUESTION 64

Refer to the exhibit. An engineer is troubleshooting a new GRE over IPsec tunnel. The tunnel is established but the engineer cannot ping from spoke 1 to spoke 2. Which type of traffic is being blocked?

ESP packets from spoke2 to spoke1

ISAKMP packets from spoke2 to spoke1

ESP packets from spoke1 to spoke2

ISAKMP packets from spoke1 to spoke2

NEW QUESTION 65
Which two types of web resources or protocols are enabled by default on the Cisco ASA Clientless SSL VPN portal? (Choose two.)

HTTP

ICA (Citrix)

VNC

RDP

CIFS

NEW QUESTION 66
A network engineer is setting up Cisco AnyConnect 4.9 on a Cisco ASA running ASA software 9.1. Cisco AnyConnect must connect to the Cisco ASA before the user logs on so that login scripts can work successfully. In addition, the VPN must connect without user intervention. Which two key steps accomplish this task? (Choose two.)

Create a Network Access Manager profile with a client policy set to connect before user logon.

Create a Cisco AnyConnect VPN profile with Start Before Logon set to true.

Issue an identity certificate to the trusted root CA folder in the machine store.

Create a Cisco AnyConnect VPN profile with Always On set to true.

Create a Cisco Anyconnect VPN Management Tunnel profile.

NEW QUESTION 67

Refer to the exhibit. Client 1 cannot communicate with client 2. Both clients are using Cisco AnyConnect and have established a successful SSL VPN connection to the hub ASA. Which command on the ASA is missing?

dns-server value 10.1.1.2

same-security-traffic permit intra-interface

same-security-traffic permit inter-interface

dns-server value 10.1.1.3

NEW QUESTION 68
Which two types of SSO functionality are available on the Cisco ASA without any external SSO servers? (Choose two.)

SAML

NTLM

Kerberos

OAuth 2.0

HTTP Basic

NEW QUESTION 69
After a user configures a connection profile with a bookmark list and tests the clientless SSLVPN connection, all of the bookmarks are grayed out. What must be done to correct this behavior?

Apply the bookmark to the correct group policy.

Specify the correct port for the web server under the bookmark.

Configure a DNS server on the Cisco ASA and verify it has a record for the web server.

Verify HTTP/HTTPS connectivity between the Cisco ASA and the web server.

NEW QUESTION 70
Refer to the exhibit.

An SSL client is connecting to an ASA headend. The session fails with the message “Connection attempt has timed out. Please verify Internet connectivity.” Based on how the packet is processed, which phase is causing the failure?

phase 9: rpf-check

phase 5: NAT

phase 4: ACCESS-LIST

phase 3: UN-NAT

NEW QUESTION 71
An engineer would like Cisco AnyConnect users to be able to reach servers within the 10.10.0.0/16 subnet while all other traffic is sent out to the Internet. Which IPsec configuration accomplishes this task?

Option A

Option B

Option C

Option D

NEW QUESTION 72
Refer to the exhibit.

Which type of Cisco VPN is shown for group Cisc012345678?

Cisco AnyConnect Client VPN

DMVPN

Clientless SSLVPN

GETVPN

NEW QUESTION 73
A DMVPN spoke router tunnel is up and passing traffic, but it cannot establish an EIGRP neighbor relationship with the hub router. Which solution resolves this issue?

Enable EIGRP Split Horizon on the hub tunnel interface.

Remove the EIGRP stub configuration on the spoke tunnel interface.

Enable the EIGRP next hop self feature on the hub tunnel interface.

Configure the dynamic NHRP multicast map on the hub tunnel interface.

NEW QUESTION 74
A user is trying to log in to a Cisco ASA using the clientless SSLVPN feature and receives the error message “clientless (browser) SSLVPN access is not allowed”. Which step should the Cisco ASA administrator take to resolve this issue?

Enable the clientless VPN protocol on the group policy.

Validate that the correct license is in use on the ASA for WebVPN.

Increase the number of simultaneous logins allowed on the group policy.

Verify that a user account exists in the local AAA database for the user.

NEW QUESTION 75
Refer to the exhibit.

Based on the exhibit, why are users unable to access CCNP Webserver bookmark?

The URL is being blocked by a WebACL.

The ASA cannot resolve the URL.

The bookmark has been disabled.

The user cannot access the URL.

Related posts:

admin

You might also like

Leave a Reply Cancel reply