Free Implementing Secure Solutions with Virtual Private Networks Exam 300-730 Exam Practice Test

Which benefit of FlexVPN is a limitation of DMVPN using IKEv1?

• GRE encapsulation allows for forwarding of non-IP traffic.
• IKE implementation can install routes in routing table.
• NHRP authentication provides enhanced security.
• Dynamic routing protocols can be configured.

The corporate network security policy requires that all internet and network traffic must be tunneled to the corporate office. Remote workers have been provided with printers to use locally at home while they are remotely connected to the corporate network. Which two steps must be executed to allow printing to the local printers? (Choose two.)

• Configure the split-tunnel-policy on the Cisco ASA to tunnelall.
• Check the Allow Local LAN access checkbox in the Cisco AnyConnect client.
• Add a persistent static route in the client OS for the local LAN network.
• Configure the split-tunnel-policy on the Cisco ASA to excludespecified.
• Configure the split-tunnel-policy on the Cisco ASA to tunnelspecified.

Which command automatically initiates a smart tunnel when a user logs in to the WebVPN portal page?

• auto-upgrade
• auto-connect
• auto-start
• auto-run

Which IKE identity does an IOS/IOS-XE headend expect to receive if an IPsec Cisco AnyConnect client uses default settings?

• *$SecureMobilityClient$*
• *$AnyConnectClient$*
• *$RemoteAccessVpnClient$*
• *$DfltlkeldentityS*

Which parameter is initially used to elect the primary key server from a group of key servers?

• code version
• highest IP address
• highest-priority value
• lowest IP address

Which Cisco AnyConnect component ensures that devices in a specific internal subnet are only accessible using port 443?

• routing
• WebACL
• split tunnel
• VPN filter

An organization wants to distribute remote access VPN load across 12 VPN headend locations supporting 25,000 simultaneous users. Which load balancing method meets this requirement?

• one VPN profile per site
• DNS-based load balancing
• AnyConnect native load balancing
• equal cost, multipath load balancing

An engineer is troubleshooting a new DMVPN setup on a Cisco IOS router. After the show crypto isakmp sa command is issued, a response is returned of 'MM_NO_STATE.' Why does this failure occur?

• The ISAKMP policy priority values are invalid.
• ESP traffic is being dropped.
• The Phase 1 policy does not match on both devices.
• Tunnel protection is not applied to the DMVPN tunnel.

Over which two transport mediums is FlexVPN deployed? (Choose two.)

• 5G
• VPLS
• internet
• MPLS
• DWDM

What are two purposes of the key server in Cisco IOS GETVPN? (Choose two.)

• to download encryption keys
• to maintain encryption policies
• to distribute routing information
• to encrypt data traffic
• to authenticate group members