Question 1

300-730-page53-image22

Refer to the exhibit. A site-to-site tunnel between two sites is not coming up. Based on the debugs, what is

the cause of this issue?

Options :

A :

An authentication failure occurs on the remote peer.

B :

A certificate fragmentation issue occurs between both sides.

C : UDP 4500 traffic from the peer does not reach the router.

D :

An authentication failure occurs on the router.

Answer: C

Question 2

An organization wants to distribute remote access VPN load across 12 VPN headend locations supporting 25,000 simultaneous users. Which load balancing method meets this requirement?

Options :

A : one VPN profile per site

B : DNS-based load balancing

C : AnyConnect native load balancing

D : equal cost, multipath load balancing

Answer: B

Question 3

A network administrator wants the Cisco ASA to automatically start downloading the Cisco AnyConnect client without prompting the user to select between WebVPN or AnyConnect. Which command accomplishes this task?

Options :

A : anyconnect ssl df-bit-ignore enable

B : anyconnect ask none default anyconnect

C : anyconnect ask enable default anyconnect

D : anyconnect modules value default

Answer: C

Question 4

Which benefit of FlexVPN is a limitation of DMVPN using IKEv1?

Options :

A :

GRE encapsulation allows for forwarding of non-IP traffic.

B :

IKE implementation can install routes in routing table.

C :

NHRP authentication provides enhanced security.

D :

Dynamic routing protocols can be configured.

Answer: B

Question 5

What uses an Elliptic Curve key exchange algorithm?

Options :

A : ECDSA

B : ECDHE

C : AES-GCM

D : SHA

Answer: B

Higher Test Marks with Free Online 300-730 Exam Practice

Buying Options: