Cisco 300-730 問題練習

Question No : 1
In a FlexVPN deployment, the spokes successfully connect to the hub, but spoke-to-spoke tunnels do not form.
Which troubleshooting step solves the issue?

• A.Verify the spoke configuration to check if the NHRP redirect is enabled.
• B.Verify that the spoke receives redirect messages and sends resolution requests.
• C.Verify the hub configuration to check if the NHRP shortcut is enabled.
• D.Verify that the tunnel interface is contained within a VR

答えを確認する

正解:
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dmvpn/configuration/15-mt/sec-conn-dmvpn-15-mt-book/sec-conn-dmvpn-summ-maps.pdf

Question No : 2
Topic 3, Troubleshooting using ASDM and CLI

Refer to the exhibit.



Based on the debug output, which type of mismatch is preventing the VPN from coming up?

• A.interesting traffic
• B.lifetime
• C.preshared key
• D.PFS

答えを確認する

正解:
Explanation:
If the responder's policy does not allow it to accept any part of the proposed Traffic Selectors, it responds with a TS_UNACCEPTABLE Notify message.

Question No : 3
Which command automatically initiates a smart tunnel when a user logs in to the WebVPN portal page?

• A.auto-upgrade
• B.auto-connect
• C.auto-start
• D.auto-run

答えを確認する

正解:
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/vpn/asa_91_vpn_config/webvpn-configure-policy-group.html

Question No : 4
Which two features provide headend resiliency for Cisco AnyConnect clients? (Choose two.)

• A.AnyConnect Auto Reconnect
• B.AnyConnect Network Access Manager
• C.AnyConnect Backup Servers
• D.ASA failover
• E.AnyConnect Always On

答えを確認する

正解:

Question No : 5
Which two types of web resources or protocols are enabled by default on the Cisco ASA Clientless SSL VPN portal? (Choose two.)

• A.HTTP
• B.ICA (Citrix)
• C.VNC
• D.RDP
• E.CIFS

答えを確認する

正解:
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa94/config-guides/cli/vpn/asa-94-vpn-config/webvpn-configure-gateway.html

Question No : 6
Refer to the exhibit.



What is configured as a result of this command set?

• A.FlexVPN client profile for IPv6
• B.FlexVPN server to authorize groups by using an IPv6 external AAA
• C.FlexVPN server for an IPv6 dVTI session
• D.FlexVPN server to authenticate IPv6 peers by using EAP

答えを確認する

正解:
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_ike2vpn/configuration/xe-3s/sec-flex-vpn-xe-3s-book/sec-cfg-flex-clnt.html

Question No : 7
Refer to the exhibit.



Which value must be configured in the User Group field when the Cisco AnyConnect Profile is created to connect to an ASA headend with IPsec as the primary protocol?

• A.address-pool
• B.group-alias
• C.group-policy
• D.tunnel-group

答えを確認する

正解:
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect41/administration/guide/b_AnyConnect_Administrator_Guide_4-1/configure-vpn.html

Question No : 8
Which configuration construct must be used in a FlexVPN tunnel?

• A.EAP configuration
• B.multipoint GRE tunnel interface
• C.IKEv1 policy
• D.IKEv2 profile

答えを確認する

正解:

Question No : 9
A Cisco AnyConnect client establishes a SSL VPN connection with an ASA at the corporate office. An engineer must ensure that the client computer meets the enterprise security policy.
Which feature can update the client to meet an enterprise security policy?

• A.Endpoint Assessment
• B.Cisco Secure Desktop
• C.Basic Host Scan
• D.Advanced Endpoint Assessment

答えを確認する

正解:

Question No : 10
Which feature allows the ASA to handle nonstandard applications and web resources so that they display correctly over a clientless SSL VPN connection?

• A.single sign-on
• B.Smart Tunnel
• C.WebType ACL
• D.plug-ins

答えを確認する

正解:
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/vpn_clientless_ssl.html#29951

Question No : 11
Refer to the exhibit.



Which VPN technology is allowed for users connecting to the Employee tunnel group?

• A.SSL AnyConnect
• B.IKEv2 AnyConnect
• C.crypto map
• D.clientless

答えを確認する

正解:

Question No : 12
Which IKE identity does an IOS/IOS-XE headend expect to receive if an IPsec Cisco AnyConnect client uses default settings?

• A.*$SecureMobilityClient$*
• B.*$AnyConnectClient$*
• C.*$RemoteAccessVpnClient$*
• D.*$DfltlkeldentityS*

答えを確認する

正解:
Explanation:
Reference: https://www.cisco.com/c/en/us/support/docs/security/flexvpn/200555-FlexVPN-AnyConnect-IKEv2-Remote-Access.html

Question No : 13
Which two statements about the Cisco ASA Clientless SSL VPN solution are true? (Choose two.)

• A.When a client connects to the Cisco ASA WebVPN portal and tries to access HTTP resources through the URL bar, the client uses the local DNS to perform FQDN resolution.
• B.The rewriter enable command under the global webvpn configuration enables the rewriter functionality because that feature is disabled by default.
• C.A Cisco ASA can simultaneously allow Clientless SSL VPN sessions and AnyConnect client sessions.
• D.When a client connects to the Cisco ASA WebVPN portal and tries to access HTTP resources through the URL bar, the ASA uses its configured DNS servers to perform FQDN resolution.
• E.Clientless SSLVPN provides Layer 3 connectivity into the secured network.

答えを確認する

正解:

Question No : 14
Which requirement is needed to use local authentication for Cisco AnyConnect Secure Mobility Clients that connect to a FlexVPN server?

• A.use of certificates instead of username and password
• B.EAP-AnyConnect
• C.EAP query-identity
• D.AnyConnect profile

答えを確認する

正解:
Explanation:
Reference: https://www.cisco.com/c/en/us/support/docs/security/flexvpn/200555-FlexVPN-AnyConnect-IKEv2-Remote-Access.html

Question No : 15
Refer to the exhibit.



Based on the exhibit, why are users unable to access CCNP Webserver bookmark?

• A.The URL is being blocked by a WebAC
• B.The ASA cannot resolve the UR
• C.The bookmark has been disabled.
• D.The user cannot access the UR

答えを確認する

正解: