300-730 Free Practice Test

Which IKE identity does an IOS/IOS-XE headend expect to receive if an IPsec Cisco AnyConnect client uses default settings?

1. A. *$SecureMobilityClient$*
2. B. *$AnyConnectClient$*
3. C. *$RemoteAccessVpnClient$*
4. D. *$DfltlkeldentityS*

Correct Answer: B
Reference: https://www.cisco.com/c/en/us/support/docs/security/flexvpn/200555-FlexVPN-AnyConnect-IKEv2-Remote-Access.html

Which redundancy protocol must be implemented for IPsec stateless failover to work?

1. A. SSO
2. B. GLBP
3. C. HSRP
4. D. VRRP

Correct Answer: C
Reference: https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/17826-ipsec-feat.html

On a FlexVPN hub-and-spoke topology where spoke-to-spoke tunnels are not allowed, which command is needed for the hub to be able to terminate FlexVPN tunnels?

1. A. interface virtual-access
2. B. ip nhrp redirect
3. C. interface tunnel
4. D. interface virtual-template

Correct Answer: D

Refer to the exhibit.
<>

1. A. interesting traffic
2. B. lifetime
3. C. preshared key
4. D. PFS

Correct Answer: B
If the responder\'s policy does not allow it to accept any part of the proposed Traffic Selectors, it responds with a TS_UNACCEPTABLE Notify message.

Refer to the exhibit.
<>

1. A. group-url https://172.16.31.10/General enable
2. B. group-policy General internal
3. C. authentication aaa
4. D. authentication certificate
5. E. group-alias General enable

Correct Answer: BE