[Oct-2022] 300-730 Dumps PDF - 300-730 Real Exam Questions Answers [Q49-Q66]

Q49. Which command automatically initiates a smart tunnel when a user logs in to the WebVPN portal page?

auto-upgrade

auto-connect

auto-start

auto-run

Q50.

Refer to the exhibit. Which two commands under the tunnel-group webvpn-attributes result in a Cisco AnyConnect user receiving the AnyConnect prompt in the exhibit? (Choose two.)

group-url https://172.16.31.10/General enable

group-policy General internal

authentication aaa

authentication certificate

group-alias General enable

Q51. Refer to the exhibit.

A network engineer is reconfiguring clientless SSLVPN during a maintenance window, and after testing the new configuration, is unable to establish the connection. What must be done to remediate this problem?

Enable client services on the outside interface.

Enable clientless protocol under the group policy.

Enable DTLS under the group policy.

Enable auto sign-on for the user’s IP address.

Q52. Refer to the exhibit.

A network engineer is configuring a remote access SSLVPN and is unable to complete the connection using local credentials. What must be done to remediate this problem?

Enable the client protocol in the Cisco AnyConnect profile.

Configure a AAA server group to authenticate the client.

Change the authentication method to local.

Configure the group policy to force local authentication.

Q53. Refer to the exhibit.

Which type of VPN is used?

GETVPN

clientless SSL VPN

Cisco Easy VPN

Cisco AnyConnect SSL VPN

Q54.

Refer to the exhibit. A site-to-site tunnel between two sites is not coming up. Based on the debugs, what is the cause of this issue?

An authentication failure occurs on the remote peer.

A certificate fragmentation issue occurs between both sides.

UDP 4500 traffic from the peer does not reach the router.

An authentication failure occurs on the router.

Q55. Refer to the exhibit.

The customer must launch Cisco AnyConnect in the RDP machine. Which IOS configuration accomplishes this task?

Option A

Option B

Option C

Option D

Q56. Refer to the exhibit.

Cisco AnyConnect must be set up on a router to allow users to access internal servers 192.168.0.10 and 192.168.0.11. All other traffic should go out of the client’s local NIC. Which command accomplishes this configuration?

svc split include 192.168.0.0 255.255.255.0

svc split exclude 192.168.0.0 255.255.255.0

svc split include acl CCNP

svc split exclude acl CCNP

Q57. Which command automatically initiates a smart tunnel when a user logs in to the WebVPN portal page?

auto-upgrade

auto-connect

auto-start

auto-run

Q58. Which two features provide headend resiliency for Cisco AnyConnect clients? (Choose two.)

AnyConnect Auto Reconnect

AnyConnect Network Access Manager

AnyConnect Backup Servers

ASA failover

AnyConnect Always On

Q59. Which command identifies a Cisco AnyConnect profile that was uploaded to the flash of an IOS router?

svc import profile SSL_profile flash:simos-profile.xml

anyconnect profile SSL_profile flash:simos-profile.xml

crypto vpn anyconnect profile SSL_profile flash:simos-profile.xml

webvpn import profile SSL_profile flash:simos-profile.xml

Q60. Refer to the exhibit.

An SSL client is connecting to an ASA headend. The session fails with the message “Connection attempt has timed out. Please verify Internet connectivity.” Based on how the packet is processed, which phase is causing the failure?

phase 9: rpf-check

phase 5: NAT

phase 4: ACCESS-LIST

phase 3: UN-NAT

Q61. In order to enable FlexVPN to use a AAA attribute list, which two tasks must be performed? (Choose two.)

Define the RADIUS server.

Verify that clients are using the correct authorization policy.

Define the AAA server.

Assign the list to an authorization policy.

Set the maximum segment size.

Q62. Which technology works with IPsec stateful failover?

GLBR

HSRP

GRE

VRRP

Q63.

Refer to the exhibit. An engineer is troubleshooting a new GRE over IPsec tunnel. The tunnel is established but the engineer cannot ping from spoke 1 to spoke 2. Which type of traffic is being blocked?

ESP packets from spoke2 to spoke1

ISAKMP packets from spoke2 to spoke1

ESP packets from spoke1 to spoke2

ISAKMP packets from spoke1 to spoke2

Q64. Which technology works with IPsec stateful failover?

GLBR

HSRP

GRE

VRRP

Q65. Which two features are valid backup options for an IOS FlexVPN client? (Choose two.)

HSRP stateless failover

DNS-based hub resolution

reactivate primary peer

tunnel pivot

need distractor

Q66. Refer to the exhibit.

All internal clients behind the ASA are port address translated to the public outside interface that has an IP address of 3.3.3.3. Client 1 and client 2 have established successful SSL VPN connections to the ASA.
What must be implemented so that “3.3.3.3” is returned from a browser search on the IP address?