최신 300-730 무료덤프 - Cisco Implementing Secure Solutions with Virtual Private Networks

문제1

Which state indicates that BFD is missing on a peer when troubleshooting DMVPN?

A. UP(U)

B. INVALID(I)

C. DOWN(D)

D. NONE(N)

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제2

Refer to the exhibit. A network engineer is configuring remote access VPN on a Cisco IOS router but cannot establish a connection from the Cisco Secure Client client. Which action resolves the issue?

A. Change Secure Client IKE identity to *$Default$*.

B. Enable crypto ikev2 http-url cert.

C. Use symmetric keys in ikev2 profile.

D. Replace self-signed certificate with a valid certificate.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제3

Which mechanism does Cisco GETVPN use to provide anti-replay protection across a group of routers that share the same security association?

A. per-peer replay counters

B. time-based anti-replay using pseudotime

C. NTP-authenticated sliding window

D. sequence-number-based anti-replay

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제4

Refer to the exhibit. The IKEv2 site-to-site VPN tunnel between two routers is down. Based on the debug output, which type of mismatch is the problem?

A. transform set

B. peer identity

C. ikev2 proposal

D. preshared key

정답: B

문제5

What is a requirement for smart tunnels to function properly?

A. Stateful failover must not be configured.

B. Java or ActiveX must be enabled on the client machine.

C. The user on the client machine must have admin access.

D. Applications must be UDP.

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제6

A network administrator has been handed a VPN configuration with the ip nhrp summary-map command configured. Which type of VPN technology is being used?

A. Ipsec VPN

B. GETVPN

C. DMVPN Phase2

D. DMVPN Phase 3

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제7

Which command converts a GRE tunnel interface into a static virtual tunnel interface for IPsec?

A. tunnel source loopback0

B. tunnel protection ipsec profile PROF

C. tunnel mode gre ip

D. tunnel mode ipsec ipv4

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제8

A network administrator is setting up a Cisco ASA to authenticate clientless SSLVPN users using an internal Microsoft Active Directory server. When the configuration is complete and the administrator attempts to connect to the clientless SSLVPN, authentication fails. Which action resolves the issue?

A. The administrator must use the correct password for the user account they are attempting to log in with.

B. Correct the login distinguished name or login password under the aaa-server configuration.

C. Add the user account the administrator is attempting to log in with to the database.

D. Configure the ASA to connect to the LDAP port being listened to on the Microsoft Active Directory server.

정답: B

문제9

A network engineer is installing Cisco AnyConnect on company laptops so that users can access corporate resources remotely. The VPN concentrator is a Cisco router running IOS-XE 16.9.1 code and configured as a FlexVPN server that uses local authentication and *$Cisc431089017$* as the key-id for the IKEv2 profile. Which two steps must be taken on the computer to allow a successful AnyConnect connection to the router? (Choose two.)

A. In the Cisco AnyConnect Local Policy, set the BypassDownloader option in the local to true.

B. In the Cisco AnyConnect Local Policy, add the router IP address to the Update Policy.

C. In the Cisco AnyConnect XML profile, set the user group field to DefaultAnyConnectClientGroup.

D. In the Cisco AnyConnect XML profile, add the hostname and host address to the server list.

E. In the Cisco AnyConnect XML profile, set the IPsec Authentication method to EAP-AnyConnect.

정답: A,E

문제10

Which is used by GETVPN, FlexVPN and DMVPN?

A. ESP

B. MPLS

C. NHRP

D. GRE

정답: A

문제11

A clientless SSLVPN is set up to allow remote users to access internal HTTPS webservers.
Users can access all but one server and see the message "Connection Failed. Server
192.168.0.101 unavailable". Pings between the Cisco ASA and the webserver are successful, and users can connect to the webserver when they use their computer in the internal network.
Which action resolves this issue?

A. Configure a DNS server that can resolve the webserver domain on the Cisco ASA.

B. Configure routing on the Cisco ASA so it can reach the webserver.

C. Add an SSL cipher that can be negotiated with the webserver to the Cisco ASA.

D. Add the http 192.168.0.101 255.255.255.255 inside command to the Cisco ASA.

정답: C

최신 300-730 무료덤프 - Cisco Implementing Secure Solutions with Virtual Private Networks

우리와 연락하기

유용한 링크

최신 업데이트