300-730

300-730 practice questions, page 8 of 10, with answer review and explanations.

Question 36

Refer to the exhibit. The IKEv2 site-to-site VPN tunnel between two routers is down. Based on the debug output, which type of mismatch is the problem?

  1. preshared key
  2. peer identity
  3. transform set
  4. ikev2 proposal

Question 37

Refer to the exhibit. Which type of mismatch is causing the problem with the IPsec VPN tunnel?

  1. crypto access list
  2. Phase 1 policy
  3. transform set
  4. preshared key

Question 38

Refer to the exhibit. What is a result of this configuration?

  1. Spoke 1 fails the authentication because the authentication methods are incorrect.
  2. Spoke 2 passes the authentication to the hub and successfully proceeds to phase 2.
  3. Spoke 2 fails the authentication because the remote authentication method is incorrect.
  4. Spoke 1 passes the authentication to the hub and successfully proceeds to phase 2.

Question 39

Refer to the exhibit. Client 1 cannot communicate with client 2. Both clients are using Cisco AnyConnect and have established a successful SSL VPN connection to the hub ASA. Which command on the ASA is missing?

  1. dns-server value 10.1.1.2
  2. same-security-traffic permit intra-interface
  3. same-security-traffic permit inter-interface
  4. dns-server value 10.1.1.3

Question 40

Refer to the exhibit. An SSL client is connecting to an ASA headend. The session fails with the message `Connection attempt has timed out. Please verify Internet connectivity.` Based on how the packet is processed, which phase is causing the failure?

  1. phase 9: rpf-check
  2. phase 5: NAT
  3. phase 4: ACCESS-LIST
  4. phase 3: UN-NAT