Question 151 · 189 in bank
Where must an engineer configure a preshared key for a site-to-site VPN tunnel configured on a Cisco ASA?
Show answer
Answer: D
300-730ProfessionalCiscoAll questions freePage 16 of 19
300-730 practice questions 151–160
Implementing Secure Solutions with Virtual Private Networks (SVPN)189 questions across 19 pages are complete and free, with no account or card.
Official study references
189 questions in this bank
Free access · progress saved on this device
Question 152 · 189 in bank
A network engineer has been tasked with configuring SSL VPN to provide remote users with access to the corporate network. Traffic destined to the enterprise IP range should go through the tunnel, and all other traffic should go directly to the Internet. Which feature should be configured to achieve this?
Show answer
Answer: C
References
Question 153 · 189 in bank
A network engineer must design a remote access solution to allow contractors to access internal servers. These contractors do not have permissions to install applications on their computers. Which VPN solution should be used in this design?
Show answer
Answer: B
Question 154 · 189 in bank
Refer to the exhibit. Which type of Cisco VPN is shown for group Cisc012345678?
Show answer
Answer: A
Explanation
I think the correct Answer should actually be A. For it to be C we would need protocol set as follows: vpn-tunnel-protocol ssl-clientless
Source: Adapted from community discussion — johnd47
Question 155 · 189 in bank
Which command shows the smart default configuration for an IPsec profile?
Show answer
Answer: D
Explanation
D Device# show crypto ipsec profile default IPSEC profile default Security association lifetime: 4608000 kilobytes/3600 seconds Responder-Only (Y/N): N PFS (Y/N): N Transform sets={ default: { esp-aes esp-sha-hmac }, } https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_ike2vpn/configuration/xe-3s/sec-flex-vpn-xe-3s-book/sec-cfg-ikev2-flex.html
Source: Adapted from community discussion — haydenme97
References
Question 156 · 189 in bank
Select 2
Refer to the exhibit. The DMVPN spoke is not establishing a session with the hub. Which two actions resolve this issue? (Choose two.)
Show answer
Answer: CE
Explanation
Answer: C,E C is correct instead of D C - spoke auth in policy should be pre-share not default of rsa-sig D - isakmp key statement already defines peer NBMA address
Source: Adapted from community discussion — jonsmackface
Question 157 · 189 in bank
Select 2Which two changes must be made in order to migrate from DMVPN Phase 2 to Phase 3 when EIGRP is configured? (Choose two.)
Show answer
Answer: DE
Explanation
Answer is D and E. DMVPN disables the EIRGP next-hop-self with "no ip next-hop-self eigrp xxx" in DMVPN phase 2, and to go from Phase 2 to 3 you need use the NHRP protocol, and again enable EIRGP next-hop-self with "ip next-hop-self eigrp 134" under the tunnel interface https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dmvpn/configuration/15-mt/sec-conn-dmvpn-15-mt-book/sec-conn-dmvpn-dmvpn.html#GUID-BF561439-BCC0-4AAF-80D9-1F7876CB7B81
Source: Adapted from community discussion — Soter
Question 158 · 189 in bank
Refer to the exhibit. A network engineer is configuring a remote access SSLVPN and is unable to complete the connection using local credentials. What must be done to remediate this problem?
Show answer
Answer: A
Question 159 · 189 in bank
Select 2Which two NHRP functions are specific to DMVPN Phase 3 implementation? (Choose two.)
Show answer
Answer: BE
Explanation
BC is the correct answer. In DMVPN Phase 3 implementation, the two NHRP (Next Hop Resolution Protocol) functions that are specific to it are resolution reply and redirect. 1. Resolution reply: This function is used by the hub router to respond to NHRP resolution requests by providing the mapping information (such as the real IP address of the spoke router). 2. Redirect: This function is used by the hub router to inform the spoke router that a more optimal path to reach a destination is available through a different spoke router. The redirect message allows the spoke router to update its routing table and use the more efficient path. These functions help in the dynamic establishment of tunnels and efficient data routing in DMVPN Phase.
Source: Adapted from community discussion — kylesam2017
Question 160 · 189 in bank
Select 2Which two features are valid backup options for an IOS FlexVPN client? (Choose two.)
Show answer
Answer: BC
References
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
300-730 practice, question 151. 189 questions available.
About this question bank
Version 1.0.0. How we source questions