Questions for the 300-730 were updated on : Sep 01 ,2024
Topic 1
DRAG DROP
Drag and drop the correct commands from the night onto the blanks within the code on the left to implement a design that
allow for dynamic spoke-to-spoke communication. Not all comments are used.
Select and Place:
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dmvpn/configuration/xe-16/sec-conn-dmvpn-xe-16-
book/sec-conn-dmvpn-summ-maps.html
Topic 1
A second set of traffic selectors is negotiated between two peers using IKEv2. Which IKEv2 packet will contain details of the
exchange?
B
Topic 1
Refer to the exhibit. The DMVPN tunnel is dropping randomly and no tunnel protection is configured. Which spoke
configuration mitigates tunnel drops?
D
Topic 1
On a FlexVPN hub-and-spoke topology where spoke-to-spoke tunnels are not allowed, which command is needed for the
hub to be able to terminate FlexVPN tunnels?
D
Topic 1
Which statement about GETVPN is true?
A
Topic 1
Refer to the exhibit. Which two tunnel types produce the show crypto ipsec sa output seen in the exhibit?
(Choose two.)
B E
Topic 1
Which two changes must be made in order to migrate from DMVPN Phase 2 to Phase 3 when EIGRP is configured?
(Choose two.)
C E
Topic 1
Refer to the exhibit. A customer cannot establish an IKEv2 site-to-site VPN tunnel between two Cisco ASA devices. Based
on the syslog message, which action brings up the VPN tunnel?
B
Topic 1
Which two parameters help to map a VPN session to a tunnel group without using the tunnel-group list?
(Choose two.)
B D
Topic 1
Which method dynamically installs the network routes for remote tunnel endpoints?
C
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_vpnav/configuration/12-4t/sec-vpnavailability-12-4t-
book/sec-rev-rte-inject.html
Topic 2, Remote access VPNs
Topic 2
Which command identifies a Cisco AnyConnect profile that was uploaded to the flash of an IOS router?
C
Explanation:
Reference: https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/200533AnyConnect-
Configure-Basic-SSLVPN-for-I.html
Topic 2
Refer to the exhibit. Which value must be configured in the User Group field when the Cisco AnyConnect Profile is created to
connect to an ASA headend with IPsec as the primary protocol?
D
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect41/
administration/guide/b_AnyConnect_Administrator_Guide_4-1/configure-vpn.html
Topic 2
Refer to the exhibit. What is configured as a result of this command set?
A
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_ike2vpn/configuration/xe-3s/sec-flexvpn-xe-3s-
book/sec-cfg-flex-clnt.html
Topic 2
Which two types of web resources or protocols are enabled by default on the Cisco ASA Clientless SSL VPN portal?
(Choose two.)
D E
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa94/config-guides/cli/vpn/asa-94-vpn-config/ webvpn-
configure-gateway.html
Topic 2
Which configuration construct must be used in a FlexVPN tunnel?
D