Question 1

Which command automatically initiates a smart tunnel when a user logs in to the WebVPN portal page?

Options :

A : auto-upgrade

B : auto-connect

C : auto-start

D :

auto-run

Answer: C

Question 2

A network engineer is configuring a server. The router will terminate encrypted VPN connections on g0/0, which is in the VRF "Internet". The cleartext traffic that must be encrypted before being sent out traverses g0/1, which is in the VRF "Internal". Which two VRF-specific configurations allow

VPN traffic to traverse the VRF-aware interfaces? (Choose two.)

Options :

A : Under the IKEv2 profile, add the ivrf Internal command.

B : Under the virtual-template interface, add the ip vrf forwarding Internet command.

C : Under the IKEv2 profile, add the match fvrf Internal command.

D : Under the IKEv2 profile, add the match fvrf Internet command

E : Under the virtual-template interface, add the tunnel vrf Internet command.

Answer: B,D

Question 3

300-730-page53-image10

Refer to the exhibit. Which value must be configured in the User Group field when the Cisco AnyConnect

Profile is created to connect to an ASA headend with IPsec as the primary protocol?

Options :

A : address-pool

B : group-alias

C : group-policy

D : tunnel-group

Answer: D

Question 4

When troubleshooting FlexVPN spoke-to-spoke tunnels, what should be verified first?

Options :

A : NHRP redirect is enabled on the hub.

B : The spokes have sent a resolution request.

C : NHRP cache entries exist on the spoke.

D : NHO routes exist on the spokes.

Answer: B

Question 5

What uses an Elliptic Curve key exchange algorithm?

Options :

A : ECDSA

B : ECDHE

C : AES-GCM

D : SHA

Answer: B

Free 300-730 Mock Exam – Practice Online Confidently

Buying Options: