Sign In
Home/Cisco/300-730/Free questions

300-730 — Free Practice Questions

10 free sample questions from a bank of 237, with the correct answers and explanations. No signup required — start practising right now.

1DRAG DROP - Drag and drop the correct commands from the right onto the blanks within the code on the left to implement a design that allow for dynamic spoke-to-spoke communication. Not all commands are used. Select and Place:
300-730 question 1
    Answer:
    2Which method dynamically installs the network routes for remote tunnel endpoints?
    • policy-based routing
    • CEF
    • reverse route injection
    • route filtering
    Answer: C
    3Refer to the exhibit. A TCP based application that should be accessible over the VPN tunnel is not working. Pings to the appropriate IP address are failing. Based on the output, what is a fix for this issue?
    300-730 question 3
    • Add a route on the remote peer for 209.165.201.0/27.
    • Add a route on the local peer for 10.1.1.0/24.
    • Add a permit for TCP traffic going to 10.1.1.0/24.
    • Add a permit for TCP traffic going to 209.165.201.0/27.
    Answer: A
    4A network engineer must expand a company's Cisco AnyConnect solution. Currently, a Cisco ASA is set up in North America and another will be installed in Europe with a different IP address. Users should connect to the ASA that has the lowest Round Trip Time from their network location as measured by the AnyConnect client. Which solution must be implemented to meet this requirement?
    • VPN Load Balancing
    • IP SLA
    • DNS Load Balancing
    • Optimal Gateway Selection
    Answer: D
    5Which clientless SSLVPN supported feature works when the http-only-cookie command is enabled?
    • Citrix load balancer
    • port reflector
    • Java rewriter - C. Java plug-ins
    • script browser
    Answer: D
    6Refer to the exhibit. An engineer is diagnosing an issue that occurred after a router at a branch site was assigned a new address. Based on the debugs, what must be done to resolve this issue?
    300-730 question 6
    • Add the remote peer’s IP address to the server's IKEv2 keyring.
    • Ensure that the correct preshared keys are set on both sides.
    • Ensure that the UDP 500 packets between devices are not dropped.
    • Add the remote peer’s identity to the server’s IKEv2 profile.
    Answer: D
    7A network engineer is setting up a clientless SSLVPN on a Cisco ASA. Remote users must be able to access an internal webserver via the URL example.com. Which two steps accomplish this task? (Choose two.)
    • Configure a bookmark for the webserver.
    • Configure routing so that the user's computer can reach the webserver.
    • Configure a DNS server that can resolve the webserver URL.
    • Configure a browser plugin on the Cisco ASA.
    • Configure routing so that the Cisco ASA can reach the webserver.
    Answer:
    8A network engineer has set up a FlexVPN server to terminate multiple FlexVPN clients. The VPN tunnels are established without issue. However, when a Change of Authorization is issued by the RADIUS server, the FlexVPN server does not update the authorization of connected FlexVPN clients. Which action resolves this issue?
    • Add the aaa server radius dynamic-author command on the FlexVPN clients.
    • Fix the RADIUS key mismatch between the RADIUS server and FlexVPN server.
    • Add the aaa server radius dynamic-author command on the FlexVPN server.
    • Fix the RADIUS key mismatch between the RADIUS server and FlexVPN clients.
    Answer: C
    9A company needs to ensure only corporate issued laptops and devices are allowed to connect with the Cisco AnyConnect client. The solution should be applicable to multiple operating systems, including Windows, MacOS, and Linux, and should allow for remote remediation if a corporate issued device is stolen. Which solution should be used to accomplish these goals?
    • Use a DAP registry check on the system to determine the relationship with the corporate domain.
    • Use a DAP file check on the system to determine the relationship with the corporate domain.
    • Install and authenticate user certificates on the corporate devices.
    • Install and authenticate machine certificates on the corporate devices
    Answer: D
    10When a FlexVPN is configured, which two components must be configured for IKEv2? (Choose two.)
    • method
    • profile
    • proposal
    • preference
    • persistence
    Answer:
    Unlock all 237 questions · $9.99Practice these interactively

    Want the full bank of 237 questions for 300-730? See all practice exams.