Cisco Implementing Secure Solutions with Virtual Private Networks - 300-730 Exam Practice Test

Refer to the exhibit. A network engineer is troubleshooting a new DMVPN configuration. The network connectivity between the hub and spoke is working as it should, but users cannot access VPN resources. Which action resolves the issue?
Correct Answer: A
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
Refer to the exhibit. A network engineer is reconfiguring clientless SSLVPN during a maintenance window, and after testing the new configuration, is unable to establish the connection. What must be done to remediate this problem?
Correct Answer: C
A second set of traffic selectors is negotiated between two peers using IKEv2.
Which IKEv2 packet will contain details of the exchange?
Correct Answer: B
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
A network administrator is setting up a Cisco ASA to authenticate clientless SSLVPN users using an internal Microsoft Active Directory server. When the configuration is complete and the administrator attempts to connect to the clientless SSLVPN, authentication fails. Which action resolves the issue?
Correct Answer: A
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
Refer to the exhibit. What is the problem with the IKEv2 site-to-site VPN tunnel?
Correct Answer: A
In which two ways is routing information exchanged between routers configured for FlexVPN?
(Choose two.)
Correct Answer: B,D
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
Which parameter is initially used to elect the primary key server from a group of key servers?
Correct Answer: D
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
A network administrator wants to block traffic to a known malware site at https:/www.badsite.com and all subdomains while ensuring no packets from any internal client are sent to that site. Which type of policy must the network administrator use to accomplish this goal?
Correct Answer: A
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
A clientless SSLVPN is set up to allow remote users to access internal HTTPS webservers.
Users can access all but one server and see the message "Connection Failed. Server
192.168.0.101 unavailable". Pings between the Cisco ASA and the webserver are successful, and users can connect to the webserver when they use their computer in the internal network.
Which action resolves this issue?
Correct Answer: B
A network engineer is setting up a clientless SSLVPN on a Cisco ASA. Remote users must be able to access an internal webserver via the URL example.com. Which two steps accomplish this task? (Choose two.)
Correct Answer: A,E
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
An administrator must guarantee that remote access users are able to reach printers on their local LAN after a VPN session is established to the headquarters. All other traffic should be sent over the tunnel. Which split-tunnel policy reduces the configuration on the ASA headend?
Correct Answer: B
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
Refer to the exhibit. What is configured as a result of this command set?
Correct Answer: C
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
Which command must be run to configure split tunneling when using the AnyConnect client and FlexVPS headend?
Correct Answer: A
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
Which redundancy protocol must be implemented for IPsec stateless failover to work?
Correct Answer: C
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
0
0
0
0