Free Implementing Secure Solutions with Virtual Private Networks Exam 300-730 Exam Practice Test

Which technology is used to send multicast traffic over a site-to-site VPN?

• GRE over IPsec on IOS router
• GRE over IPsec on FTD
• IPsec tunnel on FTD
• GRE tunnel on ASA

An organization wants to implement a site-to-site VPN solution that must be able to support 350 sites with direct communications between all sites, fully encrypt the packet header and payload, and support propagation of routing information over IPsec. Which solution meets these requirements?

• IPsec full mesh
• DMVPN
• GETVPN
• FlexVPN

Which IKE identity does an IOS/IOS-XE headend expect to receive if an IPsec Cisco AnyConnect client uses default settings?

• *$SecureMobilityClient$*
• *$AnyConnectClient$*
• *$RemoteAccessVpnClient$*
• *$DfltlkeldentityS*

When a FlexVPN is configured, which two components must be configured for IKEv2? (Choose two.)

• method
• profile
• proposal
• preference
• persistence

Which two features provide headend resiliency for Cisco AnyConnect clients? (Choose two.)

• AnyConnect Auto Reconnect
• AnyConnect Network Access Manager
• AnyConnect Backup Servers
• ASA failover
• AnyConnect Always On

Which command identifies a Cisco AnyConnect profile that was uploaded to the flash of an IOS router?

• svc import profile SSL_profile flash:simos-profile.xml
• anyconnect profile SSL_profile flash:simos-profile.xml
• crypto vpn anyconnect profile SSL_profile flash:simos-profile.xml
• webvpn import profile SSL_profile flash:simos-profile.xml

Which two commands help determine why the NHRP registration process is not being completed even after the IPsec tunnel is up? (Choose two.)

• show crypto isakmp sa
• show ip traffic
• show crypto ipsec sa
• show ip nhrp traffic
• show dmvpn detail

What are two purposes of the key server in Cisco IOS GETVPN? (Choose two.)

• to download encryption keys
• to maintain encryption policies
• to distribute routing information
• to encrypt data traffic
• to authenticate group members

Which parameter must match on all routers in a DMVPN Phase 3 cloud?

• GRE tunnel key
• NHRP network ID
• tunnel VRF
• EIGRP split-horizon setting

A network engineer is configuring a server. The router will terminate encrypted VPN connections on g0/0, which is in the VRF 'Internet'. The clear-text traffic that must be encrypted before being sent out traverses g0/1, which is in the VRF 'Internal'. Which two VRF-specific configurations allow VPN traffic to traverse the VRF-aware interfaces? (Choose two.)

• Under the IKEv2 profile, add the ivrf Internal command.
• Under the virtual-template interface, add the ip vrf forwarding Internet command.
• Under the IKEv2 profile, add the match fvrf Internal command.
• Under the IKEv2 profile, add the match fvrf Internet command.
• Under the virtual-template interface, add the tunnel vrf Internet command.