300-730 Cisco Exam Questions and Free Practice Test

Question 13

What uses an Elliptic Curve key exchange algorithm?

A. ECDSA

B. ECDHE

C. AES-GCM

D. SHA

Correct Answer:B
Reference: https://blog.cloudflare.com/a-relatively-easy-to-understand-primer-on-elliptic-curve-cryptography/

Question 14

Refer to the exhibit.
300-730 dumps exhibit
Which two commands under the tunnel-group webvpn-attributes result in a Cisco AnyConnect user receiving the AnyConnect prompt in the exhibit? (Choose two.)

A. group-url https://172.16.31.10/General enable

B. group-policy General internal

C. authentication aaa

D. authentication certificate

E. group-alias General enable

Correct Answer:BE

Question 15

Which statement about GETVPN is true?

A. The configuration that defines which traffic to encrypt originates from the key server.

B. TEK rekeys can be load-balanced between two key servers operating in COOP.

C. The pseudotime that is used for replay checking is synchronized via NTP.

D. Group members must acknowledge all KEK and TEK rekeys, regardless of configuration.

Correct Answer:A

Question 16

Which technology works with IPsec stateful failover?

A. GLBR

B. HSRP

C. GRE

D. VRRP

Correct Answer:B
Reference: https://www.cisco.com/c/en/us/td/docs/ios/12_2/12_2y/12_2yx11/feature/guide/ft_vpnha.html#wp1122512

Question 17

An engineer is troubleshooting a new DMVPN setup on a Cisco IOS router. After the show crypto isakmp sa command is issued, a response is returned of "MM_NO_STATE." Why does this failure occur?

A. The ISAKMP policy priority values are invalid.

B. ESP traffic is being dropped.

C. The Phase 1 policy does not match on both devices.

D. Tunnel protection is not applied to the DMVPN tunnel.

Correct Answer:B

Question 18

In a FlexVPN deployment, the spokes successfully connect to the hub, but spoke-to-spoke tunnels do not form. Which troubleshooting step solves the issue?

A. Verify the spoke configuration to check if the NHRP redirect is enabled.

B. Verify that the spoke receives redirect messages and sends resolution requests.

C. Verify the hub configuration to check if the NHRP shortcut is enabled.

D. Verify that the tunnel interface is contained within a VRF.

Correct Answer:B
Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dmvpn/configuration/15-mt/sec-conn-dmvpn-15-mt-book/sec-conn-dmvpn-summ-maps.pdf

START 300-730 EXAM