Cisco Implementing Secure Solutions with Virtual Private Networks 300-730 SVPN Exam Questions

Page: 1 / 14
Total 175 questions
Question 1

Refer to the exhibit.

All internal clients behind the ASA are port address translated to the public outside interface that has an IP address of 3.3.3.3. Client 1 and client 2 have established successful SSL VPN connections to the AS



Answer : C

The reason is that by default, the SSL VPN clients use split tunneling, which means they only send traffic destined for the corporate network through the VPN tunnel, and use their local gateway for other traffic, such as browsing the internet. This means that when they search for their IP address on a browser, they will see their local IP address, not the IP address of the ASA.

To change this behavior, you need to configure the Group Policy on the ASA to tunnel all networks, which means that all traffic from the SSL VPN clients will go through the VPN tunnel, regardless of the destination. This way, when they search for their IP address on a browser, they will see the IP address of the ASA, which is 3.3.3.3.

To configure tunnel all networks under Group Policy, you can use either ASDM or CLI.For example, using ASDM, you can follow these steps1:

Choose Configuration > Remote Access VPN > Network (Client) Access > Group Policies.

Select the group policy that you want to modify and click Edit.

In the Edit Internal Group Policy window, choose Advanced > Split Tunneling.

In the Policy drop-down list, choose Tunnel All Networks.

Click OK and then Apply.

Using CLI, you can enter these commands:

ciscoasa(config)# group-policy <group_policy_name> attributes ciscoasa(config-group-policy)# split-tunnel-policy tunnelall


Question 2

Which remote access VPN technology requires the use of the IPsec-proposal configuration option?



Answer : C

https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/vpn/asa-96-vpn-config/vpn-remote-access.html The IPsec-proposal configuration option is used to specify the encryption, integrity, and authentication algorithms that will be used in the IPsec protocol. In the case of IKEv2-based VPN, this option is used to configure the IPsec security associations (SA) that will be established between the VPN client and the VPN gateway during IKEv2 negotiation. IKEv2 uses IPsec as its underlying encryption and authentication protocol, so the IPsec-proposal configuration is essential to establishing a secure VPN tunnel using IKEv2


Question 3

An engineer is configuring clientless SSL VPN. The finance department has a database server that only they should access, but the sales department can currently access it. The finance and the sales departments are configured as separate group-policies. What must be added to the configuration to make sure the users in the sales department cannot access the finance department server?



Answer : D

https://www.cisco.com/c/en/us/td/docs/security/asa/asa92/configuration/general/asa-general-cli/acl-webtype.pdf


Question 4

An engineer is using DMVPN to provide secure connectivity between a data center and remote sites. Which two routing protocols should be used between the routers? (Choose two.)



Answer : B, E


Question 5

Which command automatically initiates a smart tunnel when a user logs in to the WebVPN portal page?



Answer : C


Question 6

An organization wants to distribute remote access VPN load across 12 VPN headend locations supporting 25,000 simultaneous users. Which load balancing method meets this requirement?



Answer : B


Question 7

Refer to the exhibit.

The customer must launch Cisco AnyConnect in the RDP machine. Which IOS configuration accomplishes this task?



Answer : C


Page:    1 / 14   
Total 175 questions