Practice 300-730 Exam Online

Question 1

On an ASA with multiple connection profiles for different departments, what is the best design to ensure that AnyConnect users are assigned the correct connection profile based on their department and do not have the ability to choose a different connection profile?

A : group URL

B : group alias

C : dynamic access policy

D : certificate mapping

Answer: A

Question 2

Which benefit of FlexVPN is a limitation of DMVPN using IKEv1?

A :

GRE encapsulation allows for forwarding of non-IP traffic.

B :

IKE implementation can install routes in routing table.

C :

NHRP authentication provides enhanced security.

D :

Dynamic routing protocols can be configured.

Answer: B

Question 3

Refer to the exhibit.

An engineer is building an IKEv1 tunnel to a peer Cisco ASA, but the tunnel is failing. Based on the configuration in the exhibit, which action must be taken to allow the VPN tunnel to come up?

A : Add a route for the 10.7.7.0/24 network to egress the outside interface.

B : Enable IKEv1 on the outside interface.

C : Change the IKEv1 policy number to be at least 256.

D : Change the transform set mode to transport.

Answer: B

Question 4

300-730-page53-image11

Refer to the exhibit. What is configured as a result of this command set?

A : FlexVPN client profile for IPv6

B : FlexVPN server to authorize groups by using an IPv6 external AAA

C : FlexVPN server for an IPv6 dVTI session

D :

FlexVPN server to authenticate IPv6 peers by using EAP

Answer: A

Question 5

300-730-page53-image32

Refer to the exhibit. Which type of Cisco VPN is shown for group Cisc012345678?

A : Cisco AnyConnect Client VPN

B :

DMVPN

C : Clientless SSLVPN

D : GETVPN

Answer: A

Name:	Implementing Secure Solutions with Virtual Private Networks
Exam Code:	300-730
Certification:	CCNP Security
Vendor:	Cisco
Total Questions:	190
Last Updated:	Apr 22, 2024

Cisco 300-730