300-730

300-730 practice questions, page 7 of 10, with answer review and explanations.

Question 31

In a FlexVPN deployment, the spokes successfully connect to the hub, but spoke-to-spoke tunnels do not form. Which troubleshooting step solves the issue?

  1. Verify the spoke configuration to check if the NHRP redirect is enabled.
  2. Verify that the spoke receives redirect messages and sends resolution requests.
  3. Verify the hub configuration to check if the NHRP shortcut is enabled.
  4. Verify that the tunnel interface is contained within a VRF.

Question 32

An engineer is troubleshooting a new DMVPN setup on a Cisco IOS router. After the show crypto isakmp sa command is issued, a response is returned of "MM_NO_STATE." Why does this failure occur?

  1. The ISAKMP policy priority values are invalid.
  2. ESP traffic is being dropped.
  3. The Phase 1 policy does not match on both devices.
  4. Tunnel protection is not applied to the DMVPN tunnel.

Question 33

Refer to the exhibit. The customer can establish a Cisco AnyConnect connection without using an XML profile. When the host "ikev2" is selected in the AnyConnect drop down, the connection fails. What is the cause of this issue?

  1. The HostName is incorrect.
  2. The IP address is incorrect.
  3. Primary protocol should be SSL.
  4. UserGroup must match connection profile.

Question 34

Refer to the exhibit. A site-to-site tunnel between two sites is not coming up. Based on the debugs, what is the cause of this issue?

  1. An authentication failure occurs on the remote peer.
  2. A certificate fragmentation issue occurs between both sides.
  3. UDP 4500 traffic from the peer does not reach the router.
  4. An authentication failure occurs on the router.

Question 35

Refer to the exhibit. Based on the debug output, which type of mismatch is preventing the VPN from coming up?

  1. interesting traffic
  2. lifetime
  3. preshared key
  4. PFS