100% Passing Guarantee - Brilliant 300-730 Exam Questions PDF [Jan-2023]
300-730 Dumps 2023 - NewCisco 300-730 Exam Questions
NEW QUESTION 59
Refer to the exhibit.
A user is connecting from behind a PC with a private IP Address. Their ISP provider is blocking TCP port 443. Which AnyConnect XML configuration will allow the user to establish a connection with the ASA?
- A. Option B
- B. Option D
- C. Option A
- D. Option C
Answer: B
NEW QUESTION 60
Refer to the exhibit.
Which VPN technology is allowed for users connecting to the Employee tunnel group?
- A. crypto map
- B. IKEv2 AnyConnect
- C. clientless
- D. SSL AnyConnect
Answer: B
NEW QUESTION 61 
Refer to the exhibit. Which VPN technology is allowed for users connecting to the Employee tunnel group?
- A. crypto map
- B. IKEv2 AnyConnect
- C. clientless
- D. SSL AnyConnect
Answer: B
Explanation:
Section: Remote access VPNs
NEW QUESTION 62 
Refer to the exhibit. The customer can establish a Cisco AnyConnect connection without using an XML profile. When the host "ikev2" is selected in the AnyConnect drop down, the connection fails. What is the cause of this issue?
- A. The HostName is incorrect.
- B. UserGroup must match connection profile.
- C. The IP address is incorrect.
- D. Primary protocol should be SSL.
Answer: B
Explanation:
Section: Troubleshooting using ASDM and CLI
Explanation/Reference: https://community.cisco.com/t5/security-documents/anyconnect-xml-settings/ta-p/3157891
NEW QUESTION 63
A Cisco ASA is configured in active/standby mode. What is needed to ensure that Cisco AnyConnect users can connect after a failover event?
- A. AnyConnect images must be uploaded to both failover ASA devices.
- B. Configure a backup server in the XML profile.
- C. The vpnsession-db must be cleared manually.
- D. AnyConnect client must point to the standby IP address.
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/ ha_active_standby.html
NEW QUESTION 64
Which benefit of FlexVPN is a limitation of DMVPN using IKEv1?
- A. NHRP authentication provides enhanced security.
- B. GRE encapsulation allows for forwarding of non-IP traffic.
- C. IKE implementation can install routes in routing table.
- D. Dynamic routing protocols can be configured.
Answer: C
NEW QUESTION 65
What is a requirement for smart tunnels to function properly?
- A. Stateful failover must not be configured.
- B. Applications must be UDP.
- C. The user on the client machine must have admin access.
- D. Java or ActiveX must be enabled on the client machine.
Answer: D
Explanation:
Section: Secure Communications Architectures
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation- firewalls/111007-smart-tunnel-asa-00.html
NEW QUESTION 66
What are two purposes of the key server in Cisco IOS GETVPN? (Choose two.)
- A. to distribute routing information
- B. to encrypt data traffic
- C. to maintain encryption policies
- D. to download encryption keys
- E. to authenticate group members
Answer: C,E
NEW QUESTION 67
On a FlexVPN hub-and-spoke topology where spoke-to-spoke tunnels are not allowed, which command is needed for the hub to be able to terminate FlexVPN tunnels?
- A. interface tunnel
- B. interface virtual-access
- C. ip nhrp redirect
- D. interface virtual-template
Answer: D
NEW QUESTION 68
What are two functions of ECDH and ECDSA? (Choose two.)
- A. nonrepudiation
- B. encryption
- C. revocation
- D. key exchange
- E. digital signature
Answer: D,E
NEW QUESTION 69
An engineer notices that while an employee is connected remotely, all traffic is being routed to the corporate network. Which split-tunnel policy allows a remote client to use their local provider for Internet access when working from home?
- A. tunnelall
- B. excludespecified
- C. excludeall
- D. tunnelspecified
Answer: D
NEW QUESTION 70
Which parameter is initially used to elect the primary key server from a group of key servers?
- A. code version
- B. lowest IP address
- C. highest IP address
- D. highest-priority value
Answer: D
NEW QUESTION 71
Under which section must a bookmark or URL list be configured on a Cisco ASA to be available for clientless SSLVPN users?
- A. webvpn (global configuration)
- B. tunnel-group (general-attributes)
- C. tunnel-group (webvpn-attributes)
- D. webvpn (group-policy)
Answer: A
Explanation:
Section: Remote access VPNs
NEW QUESTION 72
Which method dynamically installs the network routes for remote tunnel endpoints?
- A. policy-based routing
- B. CEF
- C. reverse route injection
- D. route filtering
Answer: C
NEW QUESTION 73
Refer to the exhibit.
An SSL client is connecting to an ASA headend. The session fails with the message "Connection attempt has timed out. Please verify Internet connectivity." Based on how the packet is processed, which phase is causing the failure?
- A. phase 4: ACCESS-LIST
- B. phase 3: UN-NAT
- C. phase 5: NAT
- D. phase 9: rpf-check
Answer: B
NEW QUESTION 74
While troubleshooting, an engineer finds that the show crypto isakmp sa command indicates that the last state of the tunnel is MM_KEY_EXCH. What is the next step that should be taken to resolve this issue?
- A. Ensure that UDP 500 is not being blocked between the devices.
- B. Verify that the ISAKMP proposals match.
- C. Confirm that the pre-shared keys match on both devices.
- D. Correct the peer's IP address on the crypto map.
Answer: D
NEW QUESTION 75
Which two features are valid backup options for an IOS FlexVPN client? (Choose two.)
- A. reactivate primary peer
- B. tunnel pivot
- C. DNS-based hub resolution
- D. need distractor
- E. HSRP stateless failover
Answer: A,C
NEW QUESTION 76
Which Cisco AnyConnect component ensures that devices in a specific internal subnet are only accessible using port 443?
- A. routing
- B. WebACL
- C. VPN filter
- D. split tunnel
Answer: C
NEW QUESTION 77
Which VPN does VPN load balancing on the ASA support?
- A. Cisco AnyConnect
- B. VTI
- C. L2TP over IPsec
- D. IPsec site-to-site tunnels
Answer: A
Explanation:
Section: Secure Communications Architectures
NEW QUESTION 78
Drag and drop the code snippets from the right onto the blanks in the configuration to implement FlexVPN. Not all snippets are used.
Answer:
Explanation:
NEW QUESTION 79
......
Free 300-730 braindumps download: https://passleader.dumpexams.com/300-730-vce-torrent.html