300-730無料問題集「Cisco Implementing Secure Solutions with Virtual Private Networks」

質問 1

Refer to the exhibit. What is the problem with the IKEv2 site-to-site VPN tunnel?

（A）crypto policy mismatch

（B）incorrect tunnel group

（C）crypto access list mismatch

（D）incorrect certificate

（E）incorrect PSK

正解：C 解答を投票する

質問 2

A network administrator is setting up a Cisco ASA to authenticate clientless SSLVPN users using an internal Microsoft Active Directory server. When the configuration is complete and the administrator attempts to connect to the clientless SSLVPN, authentication fails. Which action resolves the issue?

（A）Add the user account the administrator is attempting to log in with to the database.

（B）The administrator must use the correct password for the user account they are attempting to log in with.

（C）Correct the login distinguished name or login password under the aaa-server configuration.

（D）Configure the ASA to connect to the LDAP port being listened to on the Microsoft Active Directory server.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Refer to the exhibit. A network engineer is troubleshooting a new DMVPN configuration. The network connectivity between the hub and spoke is working as it should, but users cannot access VPN resources. Which action resolves the issue?

（A）Unblock IP protocol 50 on devices between the VPN devices.

（B）Ensure that the IPsec profile is configured on the tunnel interface.

（C）Ensure that the NHS is configured on the tunnel interface.

（D）Review ISAKMP packets on devices between the VPN devices.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

An engineer is requesting an SSL certificate for a VPN load-balancing cluster in which two Cisco ASAs provide clientless SSLVPN access. The FQDN that users will enter to access the clientless VPN is asa.example.com, and users will be redirected to either asa1.example.com or asa2.example.com. The cluster FQDN and individual Cisco ASAs FQDNs resolve to IP addresses 192.168.0.1, 192.168.0.2, and 192.168.0.3 respectively. The issued certificate must be able to be used to validate the identity of either ASA in the cluster without returning any certificate validation errors. Which fields must be included in the certificate to meet these requirements?

（A）CN=asa.example.com, SAN=asa.example.com, asa1.example.com, asa2.example.com

（B）CN=*.example.com, SAN=asa.example.com

（C）CN=192.168.0.1, SAN=192.168.0.1, 192.168.0.2, 192.168.0.3

（D）CN=192.168.0.1, SAN=asa1.example.com, asa2.example.com

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Which benefit of FlexVPN is a limitation of DMVPN using IKEv1?

（A）Dynamic routing protocols can be configured.

（B）IKE implementation can install routes in routing table.

（C）NHRP authentication provides enhanced security.

（D）GRE encapsulation allows for forwarding of non-IP traffic.

正解：B 解答を投票する

質問 6

An engineer is configuring IPsec VPN and wants to choose an authentication protocol that is reliable and supports ACK and sequence.
Which protocol accomplishes this goal?

（A）IKEv1

（B）ESP

（C）AES-192

（D）AES-256

正解：B 解答を投票する

質問 7

Refer to the exhibit. The customer must launch Cisco AnyConnect in the RDP machine. Which IOS configuration accomplishes this task?

（A）

（B）

（C）

（D）

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

Which two NHRP functions are specific to DMVPN Phase 3 implementation? (Choose two.)

（A）redirect

（B）resolution reply

（C）registration reply

（D）registration request

（E）resolution request

正解：B、E 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

A user is experiencing delays on audio calls over a Cisco AnyConnect VPN. Which implementation step resolves this issue?

（A）Enable DTLS.

（B）Shorten the encryption key lifetime.

（C）Change to 3DES Encryption.

（D）Install the Cisco AnyConnect 2.3 client for the user to download.

正解：A 解答を投票する

質問 10

A network engineer must configure the Cisco ASA so that Cisco AnyConnect clients establishing an SSL VPN connection create an additional tunnel for real-time traffic that is sensitive to packet delays. If this additional tunnel experiences any issues, it must fall back to a TLS connection.
Which two Cisco AnyConnect features must be configured to accomplish this task? (Choose two.)

（A）SSL Rekey

（B）DPD

（C）DSCP Preservation

（D）DTLS

（E）OMTU

正解：B、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 11

An engineer must design a VPN solution with this criteria:
- Configured on an IOS XE router.
- Able to terminate policy-based VPNs from Cisco and non-Cisco devices.
- QoS can be applied on a per-tunnel basis.
Which VPN technology must be used to accomplish this design?

（A）Dynamic Crypto map

（B）Multi-SA VTIs

（C）DMVPN

（D）GETVPN

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 12

An organization wants to implement a site-to-site VPN solution that must be able to support 350 sites with direct communications between all sites, fully encrypt the packet header and payload, and support propagation of routing information over IPsec. Which solution meets these requirements?

（A）DMVPN

（B）IPsec full mesh

（C）GETVPN

（D）FlexVPN

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 13

A network administrator wants to block traffic to a known malware site at https:/www.badsite.com and all subdomains while ensuring no packets from any internal client are sent to that site. Which type of policy must the network administrator use to accomplish this goal?

（A）SSL policy

（B）Prefilter policy

（C）Access Control policy with URL filtering

（D）DNS policy

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 14

After a network security administrator configures site-to-site IPsec VPN peer, they receive this error message:
1d00h: %CRYPTO-6-IKMP_MODE_FAILURE: Processing of Main Mode failed with peer at 150.150.150.1.
What is the solution to this problem?

（A）Transport set must match between sites.

（B）ISAKMP policy must match between sites.

（C）Crypto map must be applied to correct interface.

（D）IPsec policy must match between sites.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 15

Refer to the exhibit. Which component must be configured on routers for a GETVPN deployment work properly?

（A）R1: Key Server - Customer 1 CEs: Group Members

（B）Customer 1 CE1: Key Server - R1 and Customer 1 CE2: Group Members

（C）PE3: Key Server - all CEs: Group Members

（D）PE3: Key Server - Customer 2 CEs: Group Members

正解：D 解答を投票する

300-730 無料問題集「Cisco Implementing Secure Solutions with Virtual Private Networks」

弊社を連絡する

関連リンク

トップ試験