Pass the Cisco CCNP Security 300-730 Questions and answers with CertsForce

Viewing page 4 out of 5 pages
Viewing questions 31-40 out of questions
Questions # 31:

Which two types of web resources or protocols are enabled by default on the Cisco ASA Clientless SSL VPN portal? (Choose two.)

Options:

A.

HTTP


B.

ICA (Citrix)


C.

VNC


D.

RDP


E.

CIFS


Expert Solution
Questions # 32:

Which requirement is needed to use local authentication for Cisco AnyConnect Secure Mobility Clients that connect to a FlexVPN server?

Options:

A.

use of certificates instead of username and password


B.

EAP-AnyConnect


C.

EAP query-identity


D.

AnyConnect profile


Expert Solution
Questions # 33:

Refer to the exhibit.

Question # 33

Which VPN technology is allowed for users connecting to the Employee tunnel group?

Options:

A.

SSL AnyConnect


B.

IKEv2 AnyConnect


C.

crypto map


D.

clientless


Expert Solution
Questions # 34:

Refer to the exhibit.

Question # 34

What is a result of this configuration?

Options:

A.

Spoke 1 fails the authentication because the authentication methods are incorrect.


B.

Spoke 2 passes the authentication to the hub and successfully proceeds to phase 2.


C.

Spoke 2 fails the authentication because the remote authentication method is incorrect.


D.

Spoke 1 passes the authentication to the hub and successfully proceeds to phase 2.


Expert Solution
Questions # 35:

Which command is used to troubleshoot an IPv6 FlexVPN spoke-to-hub connectivity failure?

Options:

A.

show crypto ikev2 sa


B.

show crypto isakmp sa


C.

show crypto gkm


D.

show crypto identity


Expert Solution
Questions # 36:

Refer to the exhibit.

Question # 36

An SSL client is connecting to an ASA headend. The session fails with the message “Connection attempt has timed out. Please verify Internet connectivity.” Based on how the packet is processed, which phase is causing the failure?

Options:

A.

phase 9: rpf-check


B.

phase 5: NAT


C.

phase 4: ACCESS-LIST


D.

phase 3: UN-NAT


Expert Solution
Questions # 37:

Refer to the exhibit.

Question # 37

The customer can establish a Cisco AnyConnect connection without using an XML profile. When the host "ikev2" is selected in the AnyConnect drop down, the connection fails. What is the cause of this issue?

Options:

A.

The HostName is incorrect.


B.

The IP address is incorrect.


C.

Primary protocol should be SSL.


D.

UserGroup must match connection profile.


Expert Solution
Questions # 38:

Refer to the exhibit.

Question # 38

A site-to-site tunnel between two sites is not coming up. Based on the debugs, what is the cause of this issue?

Options:

A.

An authentication failure occurs on the remote peer.


B.

A certificate fragmentation issue occurs between both sides.


C.

UDP 4500 traffic from the peer does not reach the router.


D.

An authentication failure occurs on the router.


Expert Solution
Questions # 39:

Refer to the exhibit.

Question # 39

Based on the debug output, which type of mismatch is preventing the VPN from coming up?

Options:

A.

interesting traffic


B.

lifetime


C.

preshared key


D.

PFS


Expert Solution
Questions # 40:

Refer to the exhibit.

Question # 40

An engineer is troubleshooting a new GRE over IPsec tunnel. The tunnel is established but the engineer cannot ping from spoke 1 to spoke 2. Which type of traffic is being blocked?

Options:

A.

ESP packets from spoke2 to spoke1


B.

ISAKMP packets from spoke2 to spoke1


C.

ESP packets from spoke1 to spoke2


D.

ISAKMP packets from spoke1 to spoke2


Expert Solution
Viewing page 4 out of 5 pages
Viewing questions 31-40 out of questions