Tag 300-730 exam topics pdf

Q134. Refer to the exhibit. Which action must be taken on the IPsec tunnel configuration to resolve the issue?

Q135. Refer to the exhibit.

The DMVPN tunnel is dropping randomly and no tunnel protection is configured. Which spoke configuration mitigates tunnel drops?

Q136. Which command shows the smart default configuration for an IPsec profile?

Q137. Refer to the exhibit. An administrator had the above configuration working with SSL protocol, but as soon as the administrator specified IPsec as the primary protocol, the Cisco AnyConnect client was not able to connect. What is the problem?

Q138. Which parameter must match on all routers in a DMVPN Phase 3 cloud?

Q139. On a FlexVPN hub-and-spoke topology where spoke-to-spoke tunnels are not allowed, which command is needed for the hub to be able to terminate FlexVPN tunnels?

Q140. Why must a network engineer avoid usage of the default X.509 certificate when implementing clientless SSLVPN on an ASA?

Q141. Refer to the exhibit. An engineer is troubleshooting a new GRE over IPsec tunnel.
The tunnel is established but the engineer cannot ping from spoke 1 to spoke 2.
Which type of traffic is being blocked?

Q142.

Refer to the exhibit. Client 1 cannot communicate with client 2. Both clients are using Cisco AnyConnect and have established a successful SSL VPN connection to the hub ASA. Which command on the ASA is missing?

Q143. A network administrator is deploying a Cisco IPS appliance and needs it to operate initially without affecting traffic flows. It must also collect data to provide a baseline of unwanted traffic before being reconfigured to drop it. Which Cisco IPS mode meets these requirements?

Q144. Refer to the exhibit. The network administrator must allow the Cisco AnyConnect Secure Mobility Client to securely access the corporate resources via IKEv2 and print locally. Traffic that is destined for the Internet must still be tunneled to the Cisco ASA. Which configuration does the administrator use to accomplish this goal?

Q145. While troubleshooting, an engineer finds that the show crypto isakmp sa command indicates that the last state of the tunnel is MM_KEY_EXCH. What is the next step that should be taken to resolve this issue?

Q146. Refer to the exhibit.

Users cannot connect via AnyConnect SSLVPN. Which action resolves this issue?

Q147. Cisco AnyConnect clients need to transfer large files over the VPN sessions. Which protocol provides the best throughput?

Q148. Refer to the exhibit.

What is configured as a result of this command set?

Q149. An engineer must investigate a connectivity issue and decides to use the packet capture feature on Cisco FTD. The goal is to see the real packet going through the Cisco FTD device and see Snort detection actions as a part of the output. After the capture-traffic command is issued, only the packets are displayed. Which action resolves this issue?

Q150. Which clientless SSLVPN supported feature works when the http-only-cookie command is enabled?

Q151. An administrator is planning a VPN configuration that will encrypt traffic between multiple servers that will be passing unicast and multicast traffic. This configuration must be able to be implemented without the need to modify routing within the network. Which VPN technology must be used for this task?