Question 1

Which benefit of FlexVPN is a limitation of DMVPN using IKEv1?

Options :

A :

GRE encapsulation allows for forwarding of non-IP traffic.

B :

IKE implementation can install routes in routing table.

C :

NHRP authentication provides enhanced security.

D :

Dynamic routing protocols can be configured.

Answer: B

Question 2

On an ASA with multiple connection profiles for different departments, what is the best design to ensure that AnyConnect users are assigned the correct connection profile based on their department and do not have the ability to choose a different connection profile?

Options :

A : group URL

B : group alias

C : dynamic access policy

D : certificate mapping

Answer: A

Question 3

300-730-page53-image11

Refer to the exhibit. What is configured as a result of this command set?

Options :

A : FlexVPN client profile for IPv6

B : FlexVPN server to authorize groups by using an IPv6 external AAA

C : FlexVPN server for an IPv6 dVTI session

D :

FlexVPN server to authenticate IPv6 peers by using EAP

Answer: A

Question 4

300-730-page53-image54

Refer to the exhibit. Which two conclusions should be drawn from the DMVPN phase 2 configuration?

(Choose two.)

Options :

A : Next-hop-self is required.

B : EIGRP neighbor adjacency will fail.

C : EIGRP is used as the dynamic routing protocol.

D : EIGRP route redistribution is not allowed.

E : Spoke-to-spoke communication is allowed.

Answer: A,C

Question 5

Which Cisco AnyConnect component ensures that devices in a specific internal subnet are only accessible

using port 443?

Options :

A : routing

B : WebACL

C : split tunnel

D : VPN filter

Answer: D

Higher Test Marks with Free Online 300-730 Exam Practice

Buying Options: