300-730 Free Practice Test

Which command is used to troubleshoot an IPv6 FlexVPN spoke-to-hub connectivity failure?

1. A. show crypto ikev2 sa
2. B. show crypto isakmp sa
3. C. show crypto gkm
4. D. show crypto identity

Correct Answer: A
Reference: https://www.cisco.com/c/en/us/support/docs/security/flexvpn/116413-configure-flexvpn-00.pdf

Where is split tunneling defined for IKEv2 remote access clients on a Cisco router?

1. A. IKEv2 authorization policy
2. B. Group Policy
3. C. virtual template
4. D. webvpn context

Correct Answer: B

Refer to the exhibit.
<>

1. A. The URL is being blocked by a WebACL.
2. B. The ASA cannot resolve the URL.
3. C. The bookmark has been disabled.
4. D. The user cannot access the URL.

Correct Answer: C

An engineer is troubleshooting a new DMVPN setup on a Cisco IOS router. After the show crypto isakmp sa command is issued, a response is returned of "MM_NO_STATE." Why does this failure occur?

1. A. The ISAKMP policy priority values are invalid.
2. B. ESP traffic is being dropped.
3. C. The Phase 1 policy does not match on both devices.
4. D. Tunnel protection is not applied to the DMVPN tunnel.

Correct Answer: B

What are two functions of ECDH and ECDSA? (Choose two.)

1. A. nonrepudiation
2. B. revocation
3. C. digital signature
4. D. key exchange
5. E. encryption

Correct Answer: CD
Reference: https://tools.cisco.com/security/center/resources/next_generation_cryptography