Download Implementing Secure Solutions with Virtual Private Networks.ChineseDumps.300-730.2021-05-27.1e.60q.vcex

File Info

Exam	Implementing Secure Solutions with Virtual Private Networks
Number	300-730
File Name	Implementing Secure Solutions with Virtual Private Networks.ChineseDumps.300-730.2021-05-27.1e.60q.vcex
Size	6.28 Mb
Posted	May 27, 2021
Downloads	30

How to open VCEX & EXAM Files?

Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.

Download
ProfExam Simulator

Purchase
Coupon: EXAM_HUB

Discount: 20%

Demo Questions

Question 1

Drag and drop the correct commands from the night onto the blanks within the code on the left to implement a design that allow for dynamic spoke-to-spoke communication. Not all comments are used.

Correct Answer: Exam simulator is required

Question 2

A second set of traffic selectors is negotiated between two peers using IKEv2. Which IKEv2 packet will contain details of the exchange?

A: IKEv2 IKE_SA_INIT
B: IKEv2 INFORMATIONAL
C: IKEv2 CREATE_CHILD_SA
D: IKEv2 IKE_AUTH

Correct Answer: B

Question 3

Refer to the exhibit. The DMVPN tunnel is dropping randomly and no tunnel protection is configured. Which spoke configuration mitigates tunnel drops?

Correct Answer: D

Question 4

On a FlexVPN hub-and-spoke topology where spoke-to-spoke tunnels are not allowed, which command is needed for the hub to be able to terminate FlexVPN tunnels?

A: interface virtual-access
B: ip nhrp redirect
C: interface tunnel
D: interface virtual-template

Correct Answer: D

Question 5

Which statement about GETVPN is true?

A: The configuration that defines which traffic to encrypt originates from the key server.
B: TEK rekeys can be load-balanced between two key servers operating in COOP.
C: The pseudotime that is used for replay checking is synchronized via NTP.
D: Group members must acknowledge all KEK and TEK rekeys, regardless of configuration.

Correct Answer: A

Question 6

Refer to the exhibit. Which two tunnel types produce the show crypto ipsec sa output seen in the exhibit? (Choose two.)

A: crypto map
B: DMVPN
C: GRE
D: FlexVPN
E: VTI

Correct Answer: BE

Question 7

Which two changes must be made in order to migrate from DMVPN Phase 2 to Phase 3 when EIGRP is configured? (Choose two.)

A: Add NHRP shortcuts on the hub.
B: Add NHRP redirects on the spoke.
C: Disable EIGRP next-hop-self on the hub.
D: Enable EIGRP next-hop-self on the hub.
E: Add NHRP redirects on the hub.

Correct Answer: CE

Question 8

Refer to the exhibit.
A customer cannot establish an IKEv2 site-to-site VPN tunnel between two Cisco ASA devices. Based on the syslog message, which action brings up the VPN tunnel?

A: Reduce the maximum SA limit on the local Cisco ASA.
B: Increase the maximum in-negotiation SA limit on the local Cisco ASA.
C: Remove the maximum SA limit on the remote Cisco ASA.
D: Correct the crypto access list on both Cisco ASA devices.

Correct Answer: B

Question 9

Which two parameters help to map a VPN session to a tunnel group without using the tunnel-group list? (Choose two.)