Cisco 300-730 SVPN Exam Practice Test Instant Access

Question 1

When troubleshooting FlexVPN spoke-to-spoke tunnels, what should be verified first?

ANHRP redirect is enabled on the hub.

BThe spokes have sent a resolution request.

CNHRP cache entries exist on the spoke.

DNHO routes exist on the spokes.

Answer : A

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_ike2vpn/configuration/15-mt/sec-flex-vpn-15-mt-book/sec-flex-spoke.html

Question 2

A TCP based application that should be accessible over the VPN tunnel is not working. Pings to the appropriate IP address are failing.

Based on the output, what is a fix for this issue?

AAdd a route on the remote peer for 209.165.201.0/27.

BAdd a route on the local peer for 10.1.1.0/24.

CAdd a permit for TCP traffic going to 10.1.1.0/24.

DAdd a permit for TCP traffic going to 209.165.201.0/27.

Answer : A

Question 3

The corporate network security policy requires that all internet and network traffic must be tunneled to the corporate office. Remote workers have been provided with printers to use locally at home while they are remotely connected to the corporate network. Which two steps must be executed to allow printing to the local printers? (Choose two.)

AConfigure the split-tunnel-policy on the Cisco ASA to tunnelall.

BCheck the Allow Local LAN access checkbox in the Cisco AnyConnect client.

CAdd a persistent static route in the client OS for the local LAN network.

DConfigure the split-tunnel-policy on the Cisco ASA to excludespecified.

EConfigure the split-tunnel-policy on the Cisco ASA to tunnelspecified.

Answer : B, D

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/70847-local-lan-pix-asa.html

Question 4

Refer to the exhibit.

An engineer is diagnosing an issue that occurred after a router at a branch site was assigned a new address. Based on the debugs, what must be done to resolve this issue?

AAdd the remote peer's IP address to the server's IKEv2 keyring.

BEnsure that the correct preshared keys are set on both sides.

CEnsure that the UDP 500 packets between devices are not dropped.

DAdd the remote peer's identity to the server's IKEv2 profile.

Answer : D

Question 5

Refer to the exhibit.

Which component must be configured on routers for a GETVPN deployment work properly?

APE3: Key Server -- Customer 2 CEs: Group Members

BCustomer 1 CE1: Key Server -- R1 and Customer 1 CE2: Group Members

CR1: Key Server -- Customer 1 CEs: Group Members

DPE3: Key Server -- all CEs: Group Members

Answer : A

Question 6

Refer to the exhibit.

Based on the output of the show run command, which remote access VPN technology is configured?

APPTP

BSSLVPN Full Tunnel

CFlexVPN

Dclientless SSLVPN

Answer : C

Question 7

What are two differences between ECC and RSA? (Choose two.)

AKey generation in ECC is slower and more CPU intensive than RSA.

BECC can have the same security as RSA but with a shorter key size.

CECC cannot have the same security as RSA, even with an increased key size.

DKey generation in ECC is faster and less CPU intensive than RSA.

EECC lags in performance when compared with RSA.

Answer : B, D

Cisco 300-730 Implementing Secure Solutions with Virtual Private Networks SVPN Exam Practice Test