300-730 Online Practice Questions and Answers

What are two functions of ECDH and ECDSA? (Choose two.)

A. nonrepudiation

B. revocation

C. digital signature

D. key exchange

E. encryption

Cisco AnyConnect clients need to transfer large files over the VPN sessions. Which protocol provides the best throughput?

A. SSL/TLS

B. L2TP

C. DTLS

D. IPsec IKEv1

A DMVPN spoke router tunnel is up and passing traffic, but it cannot establish an EIGRP neighbor relationship with the hub router. Which solution resolves this issue?

A. Enable EIGRP Split Horizon on the hub tunnel interface.

B. Remove the EIGRP stub configuration on the spoke tunnel interface.

C. Enable the EIGRP next hop self feature on the hub tunnel interface.

D. Configure the dynamic NHRP multicast map on the hub tunnel interface.

A user is experiencing delays on audio calls over a Cisco AnyConnect VPN. Which implementation step resolves this issue?

A. Change to 3DES Encryption.

B. Shorten the encryption key lifetime.

C. Install the Cisco AnyConnect 2.3 client for the user to download.

D. Enable DTLS.

A network engineer is installing Cisco AnyConnect on company laptops so that users can access corporate resources remotely. The VPN concentrator is a Cisco router running IOS-XE 16.9.1 code and configured as a FlexVPN server that uses local authentication and *$Cisc431089017$* as the key-id for the IKEv2 profile. Which two steps must be taken on the computer to allow a successful AnyConnect connection to the router? (Choose two.)

A. In the Cisco AnyConnect XML profile, set the IPsec Authentication method to EAP-AnyConnect.

B. In the Cisco AnyConnect XML profile, add the hostname and host address to the server list.

C. In the Cisco AnyConnect XML profile, set the user group field to DefaultAnyConnectClientGroup.

D. In the Cisco AnyConnect Local Policy, set the BypassDownloader option in the local to true.

E. In the Cisco AnyConnect Local Policy, add the router IP address to the Update Policy.

A network engineer is setting up Cisco AnyConnect 4.9 on a Cisco ASA running ASA software 9.1. Cisco AnyConnect must connect to the Cisco ASA before the user logs on so that login scripts can work successfully. In addition, the VPN must connect without user intervention. Which two key steps accomplish this task? (Choose two.)

A. Create a Network Access Manager profile with a client policy set to connect before user logon.

B. Create a Cisco AnyConnect VPN profile with Start Before Logon set to true.

C. Issue an identity certificate to the trusted root CA folder in the machine store.

D. Create a Cisco AnyConnect VPN profile with Always On set to true.

E. Create a Cisco Anyconnect VPN Management Tunnel profile.

Which feature allows a DMVPN Phase 3 spoke to switch to an alternate hub when the primary hub is unreachable?

A. multicast PIM

B. backup NHS

C. per-tunnel jitter probes

D. NHRP shortcut

A network administrator deployed IKEv2 Cisco AnyConnect on a Cisco ASA. The current configuration tunnels all traffic through the VPN. Users report poor performance with cloud-based applications, but no issues have been reported about connections to on-premises servers. Packet analysis on Cisco Webex traffic shows very few duplicate ACKs, high RTT, and no IP fragments. Which action improves Webex performance for VPN users?

A. Configure QoS on the outside interface of the ASA.

B. Configure Cisco AnyConnect to use DTLS.

C. Configure a dynamic split tunnel exclusion.

D. Reduce the Cisco AnyConnect tunnel MTU.

An engineer is implementing the FlexVPN solution on a Cisco IOS router. The router must only terminate VPN requests and must not initiate them. Additionally, the interface must support VPNs from other routers and Cisco AnyConnect connections. Which interface type must be configured to meet these requirements?

A. point-to-point GRE tunnel interface

B. multipoint GRE tunnel interface

C. static virtual tunnel interface

D. virtual template interface

Which two tasks must be performed to implement a clientless VPN on the Cisco ASA? (Choose two.)

A. Configure a connection profile

B. Upload an AnyConnect Package.

C. Install an enrolled X.509 Certificate.

D. Configure a language translation file.

E. Configure a portal customization.