300-730

300-730 practice questions, page 6 of 10, with answer review and explanations.

Question 26

Which requirement is needed to use local authentication for Cisco AnyConnect Secure Mobility Clients that connect to a FlexVPN server?

  1. use of certificates instead of username and password
  2. EAP-AnyConnect
  3. EAP query-identity
  4. AnyConnect profile

Question 27

Which IKE identity does an IOS/IOS-XE headend expect to receive if an IPsec Cisco AnyConnect client uses default settings?

  1. *$SecureMobilityClient$*
  2. *$AnyConnectClient$*
  3. *$RemoteAccessVpnClient$*
  4. *$DfltlkeldentityS*

Question 28

Refer to the exhibit. Which VPN technology is allowed for users connecting to the Employee tunnel group?

  1. SSL AnyConnect
  2. IKEv2 AnyConnect
  3. crypto map
  4. clientless

Question 29

Refer to the exhibit. An engineer is troubleshooting a new GRE over IPsec tunnel. The tunnel is established, but the engineer cannot ping from spoke 1 to spoke 2. Which type of traffic is being blocked?

  1. ESP packets from spoke2 to spoke1
  2. ISAKMP packets from spoke2 to spoke1
  3. ESP packets from spoke1 to spoke2
  4. ISAKMP packets from spoke1 to spoke2

Question 30

Which command is used to troubleshoot an IPv6 FlexVPN spoke-to-hub connectivity failure?

  1. show crypto ikev2 sa
  2. show crypto isakmp sa
  3. show crypto gkm
  4. show crypto identity