This page was exported from Braindump2go Free Exam Dumps with PDF and VCE Collection [ https://www.mcitpdump.com ] Export date:Wed Dec 25 7:27:29 2024 / +0000 GMT ___________________________________________________ Title: [February-2023]Download 300-730 Dumps from Braindump2go[Q45-Q75] --------------------------------------------------- February/2023 Latest Braindump2go 300-730 Exam Dumps with PDF and VCE Free Updated Today! Following are some new Braindump2go 300-730 Real Exam Questions!QUESTION 45Which feature allows the ASA to handle nonstandard applications and web resources so that they display correctly over a clientless SSL VPN connection?A. single sign-onB. Smart TunnelC. WebType ACLD. plug-insAnswer: BExplanation:https://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/vpn_clientless_ssl.html#29951QUESTION 46Which command automatically initiates a smart tunnel when a user logs in to the WebVPN portal page?A. auto-upgradeB. auto-connectC. auto-startD. auto-runAnswer: CExplanation:https://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/vpn/asa_91_vpn_config/webvpn-configure-policy-group.htmlQUESTION 48Refer to the exhibit. Which two commands under the tunnel-group webvpn-attributes result in a Cisco AnyConnect user receiving the AnyConnect prompt in the exhibit? (Choose two.) A. group-url https://172.16.31.10/General enableB. group-policy General internalC. authentication aaaD. authentication certificateE. group-alias General enableAnswer: CEQUESTION 49Which two statements are true when designing a SSL VPN solution using Cisco AnyConnect? (Choose two.)A. The VPN server must have a self-signed certificate.B. A SSL group pre-shared key must be configured on the server.C. Server side certificate is optional if using AAA for client authentication.D. The VPN IP address pool can overlap with the rest of the LAN networks.E. DTLS can be enabled for better performance.Answer: DEQUESTION 50An engineer is configuring IPsec VPN and wants to choose an authentication protocol that is reliable and supports ACK and sequence.Which protocol accomplishes this goal?A. IKEv1B. AES-192C. ESPD. AES-256Answer: CQUESTION 51Refer to the exhibit. What is the problem with the IKEv2 site-to-site VPN tunnel? A. incorrect PSKB. crypto access list mismatchC. incorrect tunnel groupD. crypto policy mismatchE. incorrect certificateAnswer: BQUESTION 52Which requirement is needed to use local authentication for Cisco AnyConnect Secure Mobility Clients that connect to a FlexVPN server?A. use of certificates instead of username and passwordB. EAP-AnyConnectC. EAP query-identityD. AnyConnect profileAnswer: DExplanation:https://www.cisco.com/c/en/us/support/docs/security/flexvpn/200555-FlexVPN-AnyConnect-IKEv2-Remote-Access.htmlQUESTION 53Which IKE identity does an IOS/IOS-XE headend expect to receive if an IPsec Cisco AnyConnect client uses default settings?A. *$SecureMobilityClient$*B. *$AnyConnectClient$*C. *$RemoteAccessVpnClient$*D. *$DfltlkeldentityS*Answer: BExplanation:https://www.cisco.com/c/en/us/support/docs/security/flexvpn/200555-FlexVPN-AnyConnect-IKEv2-Remote-Access.htmlQUESTION 54Refer to the exhibit. Which VPN technology is allowed for users connecting to the Employee tunnel group? A. SSL AnyConnectB. IKEv2 AnyConnectC. crypto mapD. clientlessAnswer: DExplanation:The tunnel-group Employee has no entry for a specific default-group-policy as with the Admin-Group.The group-policy DfltGrpPolicy is used instead. This permits only ssl-clientless.QUESTION 55Refer to the exhibit. An engineer is troubleshooting a new GRE over IPsec tunnel. The tunnel is established but the engineer cannot ping from spoke 1 to spoke 2. Which type of traffic is being blocked? A. ESP packets from spoke2 to spoke1B. ISAKMP packets from spoke2 to spoke1C. ESP packets from spoke1 to spoke2D. ISAKMP packets from spoke1 to spoke2Answer: AQUESTION 56Which command is used to troubleshoot an IPv6 FlexVPN spoke-to-hub connectivity failure?A. show crypto ikev2 saB. show crypto isakmp saC. show crypto gkmD. show crypto identityAnswer: AExplanation:https://www.cisco.com/c/en/us/support/docs/security/flexvpn/116413-configure-flexvpn-00.pdfQUESTION 57In a FlexVPN deployment, the spokes successfully connect to the hub, but spoke-to-spoke tunnels do not form. Which troubleshooting step solves the issue?A. Verify the spoke configuration to check if the NHRP redirect is enabled.B. Verify that the spoke receives redirect messages and sends resolution requests.C. Verify the hub configuration to check if the NHRP shortcut is enabled.D. Verify that the tunnel interface is contained within a VRF.Answer: BExplanation:https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dmvpn/configuration/15-mt/sec-conn-dmvpn-15-mt-book/sec-conn-dmvpn-summ-maps.pdfQUESTION 58An engineer is troubleshooting a new DMVPN setup on a Cisco IOS router. After the show crypto isakmp sa command is issued, a response is returned of "MM_NO_STATE." Why does this failure occur?A. The ISAKMP policy priority values are invalid.B. ESP traffic is being dropped.C. The Phase 1 policy does not match on both devices.D. Tunnel protection is not applied to the DMVPN tunnel.Answer: CExplanation:https://www.cisco.com/c/en/us/support/docs/security/dynamic-multipoint-vpn-dmvpn/111976-dmvpn-troubleshoot-00.htmlQUESTION 59What are two variables for configuring clientless SSL VPN single sign-on? (Choose two.)A. CSCO_WEBVPN_OTP_PASSWORDB. CSCO_WEBVPN_INTERNAL_PASSWORDC. CSCO_WEBVPN_USERNAMED. CSCO_WEBVPN_RADIUS_USERAnswer: BCQUESTION 60Which two NHRP functions are specific to DMVPN Phase 3 implementation? (Choose two.)A. registration requestB. registration replyC. resolution requestD. resolution replyE. redirectAnswer: DEQUESTION 61Refer to the exhibit. The customer can establish a Cisco AnyConnect connection without using an XML profile. When the host "ikev2" is selected in the AnyConnect drop down, the connection fails. What is the cause of this issue? A. The HostName is incorrect.B. The IP address is incorrect.C. Primary protocol should be SSL.D. UserGroup must match connection profile.Answer: DExplanation:https://community.cisco.com/t5/security-documents/anyconnect-xml-settings/ta-p/3157891QUESTION 62Refer to the exhibit. A site-to-site tunnel between two sites is not coming up.Based on the debugs, what is the cause of this issue? A. An authentication failure occurs on the remote peer.B. A certificate fragmentation issue occurs between both sides.C. UDP 4500 traffic from the peer does not reach the router.D. An authentication failure occurs on the router.Answer: CQUESTION 63Refer to the exhibit. Based on the debug output, which type of mismatch is preventing the VPN from coming up? A. interesting trafficB. lifetimeC. preshared keyD. PFSAnswer: AExplanation:TS unacceptable:The IPsec SA setup has failed due to a mismatch in the policy rule definition between the gateways for the tunnel configuration.Check the local and remote network configuration on both gateways.QUESTION 64Refer to the exhibit. The IKEv2 site-to-site VPN tunnel between two routers is down. Based on the debug output, which type of mismatch is the problem? A. preshared keyB. peer identityC. transform setD. ikev2 proposalAnswer: BQUESTION 65Refer to the exhibit. Which type of mismatch is causing the problem with the IPsec VPN tunnel? A. crypto access listB. Phase 1 policyC. transform setD. preshared keyAnswer: DExplanation:https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/5409-ipsec-debug-00.html#ikeQUESTION 66Refer to the exhibit. What is a result of this configuration? A. Spoke 1 fails the authentication because the authentication methods are incorrect.B. Spoke 2 passes the authentication to the hub and successfully proceeds to phase 2.C. Spoke 2 fails the authentication because the remote authentication method is incorrect.D. Spoke 1 passes the authentication to the hub and successfully proceeds to phase 2.Answer: AQUESTION 67Which two cryptographic technologies are recommended for use with FlexVPN? (Choose two.)A. SHA (HMAC variant) B. Diffie-HellmanC. DESD. MD5 (HMAC variant)Answer: ABQUESTION 68Refer to the exhibit. An administrator had the above configuration working with SSL protocol, but as soon as the administrator specified IPsec as the primary protocol, the Cisco AnyConnect client was not able to connect. What is the problem? A. IPsec will not work in conjunction with a group URL.B. The Cisco AnyConnect implementation does not allow the two group URLs to be the same.SSL does allow this.C. If you specify the primary protocol as IPsec, the User Group must be the exact name of the connection profile (tunnel group).D. A new XML profile should be created instead of modifying the existing profile, so that the clients force the update.Answer: CQUESTION 69Refer to the exhibit. Client 1 cannot communicate with client 2. Both clients are using Cisco AnyConnect and have established a successful SSL VPN connection to the hub ASA.Which command on the ASA is missing? A. dns-server value 10.1.1.2B. same-security-traffic permit intra-interfaceC. same-security-traffic permit inter-interfaceD. dns-server value 10.1.1.3Answer: BQUESTION 70Refer to the exhibit. An SSL client is connecting to an ASA headend. The session fails with the message "Connection attempt has timed out. Please verify Internet connectivity." Based on how the packet is processed, which phase is causing the failure? A. phase 9: rpf-checkB. phase 5: NATC. phase 4: ACCESS-LISTD. phase 3: UN-NATAnswer: DQUESTION 71Which redundancy protocol must be implemented for IPsec stateless failover to work?A. SSOB. GLBPC. HSRPD. VRRPAnswer: CExplanation:https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/17826-ipsec-feat.htmlQUESTION 72Which technology works with IPsec stateful failover?A. GLBRB. HSRPC. GRED. VRRPAnswer: BExplanation:https://www.cisco.com/c/en/us/td/docs/ios/12_2/12_2y/12_2yx11/feature/guide/ft_vpnha.html#wp1122512QUESTION 73What are two functions of ECDH and ECDSA? (Choose two.)A. nonrepudiationB. revocationC. digital signatureD. key exchangeE. encryptionAnswer: CDExplanation:https://tools.cisco.com/security/center/resources/next_generation_cryptographyQUESTION 74What uses an Elliptic Curve key exchange algorithm?A. ECDSAB. ECDHEC. AES-GCMD. SHAAnswer: BExplanation:https://blog.cloudflare.com/a-relatively-easy-to-understand-primer-on-elliptic-curve-cryptography/QUESTION 75Which two remote access VPN solutions support SSL? (Choose two.)A. FlexVPNB. clientlessC. EZVPND. L2TPE. Cisco AnyConnectAnswer: BEResources From:1.2023 Latest Braindump2go 300-730 Exam Dumps (PDF & VCE) Free Share:https://www.braindump2go.com/300-730.html2.2023 Latest Braindump2go 300-730 PDF and 300-730 VCE Dumps Free Share:https://drive.google.com/drive/folders/1zBS7xcmszvPHlrS_lPaM4uUF1VvomE4a?usp=sharingFree Resources from Braindump2go,We Devoted to Helping You 100% Pass All Exams! --------------------------------------------------- Images: --------------------------------------------------- --------------------------------------------------- Post date: 2023-02-02 03:01:39 Post date GMT: 2023-02-02 03:01:39 Post modified date: 2023-02-02 03:01:39 Post modified date GMT: 2023-02-02 03:01:39 ____________________________________________________________________________________________ Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com