300-730 Free Practice Test

Refer to the exhibit.

An engineer is troubleshooting a new GRE over IPsec tunnel. The tunnel is established but the engineer cannot ping from spoke 1 to spoke 2. Which type of traffic is being blocked?

1. A. ESP packets from spoke2 to spoke1
2. B. ISAKMP packets from spoke2 to spoke1
3. C. ESP packets from spoke1 to spoke2
4. D. ISAKMP packets from spoke1 to spoke2

Correct Answer: A

What are two functions of ECDH and ECDSA? (Choose two.)

1. A. nonrepudiation
2. B. revocation
3. C. digital signature
4. D. key exchange
5. E. encryption

Correct Answer: CD
Reference: https://tools.cisco.com/security/center/resources/next_generation_cryptography

Refer to the exhibit.
<>

1. A. preshared key
2. B. peer identity
3. C. transform set
4. D. ikev2 proposal

Correct Answer: B

Refer to the exhibit.
An SSL client is connecting to an ASA headend. The session fails with the message “Connection attempt has timed out. Please verify Internet connectivity.” Based on how the packet is processed, which phase is causing the failure?

1. A. phase 9: rpf-check
2. B. phase 5: NAT
3. C. phase 4: ACCESS-LIST
4. D. phase 3: UN-NAT

Correct Answer: D

Which two statements about the Cisco ASA Clientless SSL VPN solution are true? (Choose two.)

1. A. When a client connects to the Cisco ASA WebVPN portal and tries to access HTTP resources through the URL bar, the client uses the local DNS to perform FQDN resolution.
2. B. The rewriter enable command under the global webvpn configuration enables the rewriter functionality because that feature is disabled by default.
3. C. A Cisco ASA can simultaneously allow Clientless SSL VPN sessions and AnyConnect client sessions.
4. D. When a client connects to the Cisco ASA WebVPN portal and tries to access HTTP resources through the URL bar, the ASA uses its configured DNS servers to perform FQDN resolution.
5. E. Clientless SSLVPN provides Layer 3 connectivity into the secured network.

Correct Answer: CD