300-730 Free Practice Test

Which technology is used to send multicast traffic over a site-to-site VPN?

1. A. GRE over IPsec on IOS router
2. B. GRE over IPsec on FTD
3. C. IPsec tunnel on FTD
4. D. GRE tunnel on ASA

Correct Answer: B

Which parameter is initially used to elect the primary key server from a group of key servers?

1. A. code version
2. B. highest IP address
3. C. highest-priority value
4. D. lowest IP address

Correct Answer: C
Reference: https://www.cisco.com/c/en/us/products/collateral/security/group-encrypted-transport-vpn/deployment_guide_c07_554713.html

Refer to the exhibit.

Which two tunnel types produce the show crypto ipsec sa output seen in the exhibit? (Choose two.)

1. A. crypto map
2. B. DMVPN
3. C. GRE
4. D. FlexVPN
5. E. VTI

Correct Answer: BE

Refer to the exhibit.

Which value must be configured in the User Group field when the Cisco AnyConnect Profile is created to connect to an ASA headend with IPsec as the primary protocol?

1. A. address-pool
2. B. group-alias
3. C. group-policy
4. D. tunnel-group

Correct Answer: D
Reference: https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect41/administration/guide/b_AnyConnect_Administrator_Guide_4-1/configure-vpn.html

Refer to the exhibit.

What is configured as a result of this command set?

1. A. FlexVPN client profile for IPv6
2. B. FlexVPN server to authorize groups by using an IPv6 external AAA
3. C. FlexVPN server for an IPv6 dVTI session
4. D. FlexVPN server to authenticate IPv6 peers by using EAP

Correct Answer: A
Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_ike2vpn/configuration/xe-3s/sec-flex-vpn-xe-3s-book/sec-cfg-flex-clnt.html