300-730 Online Practice Questions and Answers

A second set of traffic selectors is negotiated between two peers using IKEv2. Which IKEv2 packet will contain details of the exchange?

A. IKEv2 IKE_SA_INIT

B. IKEv2 INFORMATIONAL

C. IKEv2 CREATE_CHILD_SA

D. IKEv2 IKE_AUTH

Which statement about GETVPN is true?

A. The configuration that defines which traffic to encrypt originates from the key server.

B. TEK rekeys can be load-balanced between two key servers operating in COOP.

C. The pseudotime that is used for replay checking is synchronized via NTP.

D. Group members must acknowledge all KEK and TEK rekeys, regardless of configuration.

Refer to the exhibit.

What is configured as a result of this command set?

A. FlexVPN client profile for IPv6

B. FlexVPN server to authorize groups by using an IPv6 external AAA

C. FlexVPN server for an IPv6 dVTI session

D. FlexVPN server to authenticate IPv6 peers by using EAP

Refer to the exhibit.

Which VPN technology is allowed for users connecting to the Employee tunnel group?

A. SSL AnyConnect

B. IKEv2 AnyConnect

C. crypto map

D. clientless

Which parameter must match on all routers in a DMVPN Phase 3 cloud?

A. GRE tunnel key

B. NHRP network ID

C. tunnel VRF

D. EIGRP split-horizon setting

An organization wants to distribute remote access VPN load across 12 VPN headend locations supporting 25,000 simultaneous users. Which load balancing method meets this requirement?

A. one VPN profile per site

B. DNS-based load balancing

C. AnyConnect native load balancing

D. equal cost, multipath load balancing

What are two differences between ECC and RSA? (Choose two.)

A. Key generation in ECC is slower and more CPU intensive than RSA.

B. ECC can have the same security as RSA but with a shorter key size.

C. ECC cannot have the same security as RSA, even with an increased key size.

D. Key generation in ECC is faster and less CPU intensive than RSA.

E. ECC lags in performance when compared with RSA.

The corporate network security policy requires that all internet and network traffic must be tunneled to the corporate office. Remote workers have been provided with printers to use locally at home while they are remotely connected to the corporate network. Which two steps must be executed to allow printing to the local printers? (Choose two.)

A. Configure the split-tunnel-policy on the Cisco ASA to tunnelall.

B. Check the Allow Local LAN access checkbox in the Cisco AnyConnect client.

C. Add a persistent static route in the client OS for the local LAN network.

D. Configure the split-tunnel-policy on the Cisco ASA to excludespecified.

E. Configure the split-tunnel-policy on the Cisco ASA to tunnelspecified.

Which remote access VPN technology requires transform sets to be explicitly defined?

A. Clientless SSLVPN

B. IPSec

C. Cisco Anyconnect

D. FlexVPN

DRAG DROP

Drag and drop the GET VPN components from the left onto the correct descriptions on the right.

Select and Place: