Question 1

300-730-page53-image58

Refer to the exhibit. Which type of VPN implementation is displayed?

Options :

A : IKEv1 cluster

B :

IKEv2 backup gateway

C : IKEv2 load balancer

D :

IKEv2 reconnect

Answer: C

Question 2

A network engineer is configuring a server. The router will terminate encrypted VPN connections on g0/0, which is in the VRF "Internet". The cleartext traffic that must be encrypted before being sent out traverses g0/1, which is in the VRF "Internal". Which two VRF-specific configurations allow

VPN traffic to traverse the VRF-aware interfaces? (Choose two.)

Options :

A : Under the IKEv2 profile, add the ivrf Internal command.

B : Under the virtual-template interface, add the ip vrf forwarding Internet command.

C : Under the IKEv2 profile, add the match fvrf Internal command.

D : Under the IKEv2 profile, add the match fvrf Internet command

E : Under the virtual-template interface, add the tunnel vrf Internet command.

Answer: B,D

Question 3

What uses an Elliptic Curve key exchange algorithm?

Options :

A : ECDSA

B : ECDHE

C : AES-GCM

D : SHA

Answer: B

Question 4

Which Cisco AnyConnect component ensures that devices in a specific internal subnet are only accessible

using port 443?

Options :

A : routing

B : WebACL

C : split tunnel

D : VPN filter

Answer: D

Question 5

300-730-page53-image11

Refer to the exhibit. What is configured as a result of this command set?

Options :

A : FlexVPN client profile for IPv6

B : FlexVPN server to authorize groups by using an IPv6 external AAA

C : FlexVPN server for an IPv6 dVTI session

D :

FlexVPN server to authenticate IPv6 peers by using EAP

Answer: A

Free 300-730 Mock Exam – Practice Online Confidently

Buying Options: