300-730 Free Practice Test

Refer to the exhibit.
<>

1. A. preshared key
2. B. peer identity
3. C. transform set
4. D. ikev2 proposal

Correct Answer: B

Refer to the exhibit.
An SSL client is connecting to an ASA headend. The session fails with the message “Connection attempt has timed out. Please verify Internet connectivity.” Based on how the packet is processed, which phase is causing the failure?

1. A. phase 9: rpf-check
2. B. phase 5: NAT
3. C. phase 4: ACCESS-LIST
4. D. phase 3: UN-NAT

Correct Answer: D

Which two statements about the Cisco ASA Clientless SSL VPN solution are true? (Choose two.)

1. A. When a client connects to the Cisco ASA WebVPN portal and tries to access HTTP resources through the URL bar, the client uses the local DNS to perform FQDN resolution.
2. B. The rewriter enable command under the global webvpn configuration enables the rewriter functionality because that feature is disabled by default.
3. C. A Cisco ASA can simultaneously allow Clientless SSL VPN sessions and AnyConnect client sessions.
4. D. When a client connects to the Cisco ASA WebVPN portal and tries to access HTTP resources through the URL bar, the ASA uses its configured DNS servers to perform FQDN resolution.
5. E. Clientless SSLVPN provides Layer 3 connectivity into the secured network.

Correct Answer: CD

Which IKE identity does an IOS/IOS-XE headend expect to receive if an IPsec Cisco AnyConnect client uses default settings?

1. A. *$SecureMobilityClient$*
2. B. *$AnyConnectClient$*
3. C. *$RemoteAccessVpnClient$*
4. D. *$DfltlkeldentityS*

Correct Answer: B
Reference: https://www.cisco.com/c/en/us/support/docs/security/flexvpn/200555-FlexVPN-AnyConnect-IKEv2-Remote-Access.html

Which redundancy protocol must be implemented for IPsec stateless failover to work?

1. A. SSO
2. B. GLBP
3. C. HSRP
4. D. VRRP

Correct Answer: C
Reference: https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/17826-ipsec-feat.html