300-730 Free Practice Test

Refer to the exhibit.
<>

1. A. Spoke 1 fails the authentication because the authentication methods are incorrect.
2. B. Spoke 2 passes the authentication to the hub and successfully proceeds to phase 2.
3. C. Spoke 2 fails the authentication because the remote authentication method is incorrect.
4. D. Spoke 1 passes the authentication to the hub and successfully proceeds to phase 2.

Correct Answer: A

A Cisco AnyConnect client establishes a SSL VPN connection with an ASA at the corporate office. An engineer must ensure that the client computer meets the enterprise security policy. Which feature can update the client to meet an enterprise security policy?

1. A. Endpoint Assessment
2. B. Cisco Secure Desktop
3. C. Basic Host Scan
4. D. Advanced Endpoint Assessment

Correct Answer: D

Which parameter is initially used to elect the primary key server from a group of key servers?

1. A. code version
2. B. highest IP address
3. C. highest-priority value
4. D. lowest IP address

Correct Answer: C
Reference: https://www.cisco.com/c/en/us/products/collateral/security/group-encrypted-transport-vpn/deployment_guide_c07_554713.html

Which command is used to troubleshoot an IPv6 FlexVPN spoke-to-hub connectivity failure?

1. A. show crypto ikev2 sa
2. B. show crypto isakmp sa
3. C. show crypto gkm
4. D. show crypto identity

Correct Answer: A
Reference: https://www.cisco.com/c/en/us/support/docs/security/flexvpn/116413-configure-flexvpn-00.pdf

Where is split tunneling defined for IKEv2 remote access clients on a Cisco router?

1. A. IKEv2 authorization policy
2. B. Group Policy
3. C. virtual template
4. D. webvpn context

Correct Answer: B