Cisco 300-730 Exam Questions Free Practice Test

Viewing page 3 out of 5 pages

Viewing questions 21-30 out of questions

Questions # 21:

In order to enable FlexVPN to use a AAA attribute list, which two tasks must be performed? (Choose two.)

Options:

Define the RADIUS server.

Verify that clients are using the correct authorization policy.

Define the AAA server.

Assign the list to an authorization policy.

Set the maximum segment size.

Expert Solution

Questions # 22:

Over which two transport mediums is FlexVPN deployed? (Choose two.)

Options:

VPLS

internet

MPLS

DWDM

Expert Solution

Questions # 23:

Which configuration construct must be used in a FlexVPN tunnel?

Options:

EAP configuration

multipoint GRE tunnel interface

IKEv1 policy

IKEv2 profile

Expert Solution

Questions # 24:

Refer to the exhibit.

Question # 24

Which value must be configured in the User Group field when the Cisco AnyConnect Profile is created to connect to an ASA headend with IPsec as the primary protocol?

Options:

address-pool

group-alias

group-policy

tunnel-group

Expert Solution

Questions # 25:

Refer to the exhibit.

Question # 25

The customer must launch Cisco AnyConnect in the RDP machine. Which IOS configuration accomplishes this task?

Question # 25

Options:

Option A

Option B

Option C

Option D

Expert Solution

Questions # 26:

Under which section must a bookmark or URL list be configured on a Cisco ASA to be available for clientless SSLVPN users?

Options:

tunnel-group (general-attributes)

tunnel-group (webvpn-attributes)

webvpn (group-policy)

webvpn (global configuration)

Expert Solution

Questions # 27:

Which command identifies a Cisco AnyConnect profile that was uploaded to the flash of an IOS router?

Options:

svc import profile SSL_profile flash:simos-profile.xml

anyconnect profile SSL_profile flash:simos-profile.xml

crypto vpn anyconnect profile SSL_profile flash:simos-profile.xml

webvpn import profile SSL_profile flash:simos-profile.xml

Expert Solution

Questions # 28:

Cisco AnyConnect Secure Mobility Client has been configured to use IKEv2 for one group of users and SSL for another group. When the administrator configures a new AnyConnect release on the Cisco ASA, the IKEv2 users cannot download it automatically when they connect. What might be the problem?

Options:

The XML profile is not configured correctly for the affected users.

The new client image does not use the same major release as the current one.

Client services are not enabled.

Client software updates are not supported with IKEv2.

Expert Solution

Questions # 29:

Refer to the exhibit.

Question # 29

Based on the exhibit, why are users unable to access CCNP Webserver bookmark?

Options:

The URL is being blocked by a WebACL.

The ASA cannot resolve the URL.

The bookmark has been disabled.

The user cannot access the URL.

Expert Solution

Questions # 30:

Which two statements about the Cisco ASA Clientless SSL VPN solution are true? (Choose two.)

Options:

When a client connects to the Cisco ASA WebVPN portal and tries to access HTTP resources through the URL bar, the client uses the local DNS to perform FQDN resolution.

The rewriter enable command under the global webvpn configuration enables the rewriter functionality because that feature is disabled by default.

A Cisco ASA can simultaneously allow Clientless SSL VPN sessions and AnyConnect client sessions.

When a client connects to the Cisco ASA WebVPN portal and tries to access HTTP resources through the URL bar, the ASA uses its configured DNS servers to perform FQDN resolution.

Clientless SSLVPN provides Layer 3 connectivity into the secured network.

Expert Solution

Viewing page 3 out of 5 pages

Viewing questions 21-30 out of questions

Pass the Cisco CCNP Security 300-730 Questions and answers with CertsForce