Legit 300-730 Exam Download

Implementing Secure Solutions with Virtual Private Networks (SVPN) Questions and Answers

Question 33

Refer to the exhibit.

An engineer is troubleshooting a new GRE over IPsec tunnel. The tunnel is established but the engineer cannot ping from spoke 1 to spoke 2. Which type of traffic is being blocked?

Options:

ESP packets from spoke2 to spoke1

ISAKMP packets from spoke2 to spoke1

ESP packets from spoke1 to spoke2

ISAKMP packets from spoke1 to spoke2

Question 34

Refer to the exhibit.

The customer can establish a Cisco AnyConnect connection without using an XML profile. When the host "ikev2" is selected in the AnyConnect drop down, the connection fails. What is the cause of this issue?

Options:

The HostName is incorrect.

The IP address is incorrect.

Primary protocol should be SSL.

UserGroup must match connection profile.

Question 35

An engineer is troubleshooting a new DMVPN setup on a Cisco IOS router. After the show crypto isakmp sa command is issued, a response is returned of "MM_NO_STATE." Why does this failure occur?

Options:

The ISAKMP policy priority values are invalid.

ESP traffic is being dropped.

The Phase 1 policy does not match on both devices.

Tunnel protection is not applied to the DMVPN tunnel.

Question 36

Refer to the exhibit.

An SSL client is connecting to an ASA headend. The session fails with the message “Connection attempt has timed out. Please verify Internet connectivity.” Based on how the packet is processed, which phase is causing the failure?

Options:

phase 9: rpf-check

phase 5: NAT

phase 4: ACCESS-LIST

phase 3: UN-NAT

Labour Day Special - Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: top65certs

Implementing Secure Solutions with Virtual Private Networks (SVPN) Questions and Answers

Options:

Answer:

Options:

Answer:

Explanation:

Options:

Answer:

Explanation:

Options:

Answer: