Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
Cisco
CCNP Security
300-730
Implementing Secure Solutions with Virtual Private Networks (SVPN) Questions and Answers

Pass the Cisco CCNP Security 300-730 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam 300-730 Premium Access

View all detail and faqs for the 300-730 exam

Go to Exam

811 Students Passed

86% Average Score

90% Same Questions

Viewing page 2 out of 5 pages

Viewing questions 11-20 out of questions

Questions # 11:

A user is trying to log in to a Cisco ASA using the clientless SSLVPN feature and receives the error message "clientless (browser) SSLVPN access is not allowed". Which step should the Cisco ASA administrator take to resolve this issue?

Options:

Enable the clientless VPN protocol on the group policy.

Validate that the correct license is in use on the ASA for WebVPN.

Increase the number of simultaneous logins allowed on the group policy.

Verify that a user account exists in the local AAA database for the user.

Answer

Explanation

https://www.cisco.com/c/en/us/support/docs/security-vpn/webvpn-ssl-vpn/119417-config-asa-00.html#anc12 https://community.cisco.com/t5/vpn/clientless-vpn-clientless-browser-ssl-vpn-access-is-not-allowed/td-p/1569690

Questions # 12:

Refer to the exhibit.

Question # 12

Based on the exhibit, why are users unable to access CCNP Webserver bookmark?

Options:

The URL is being blocked by a WebACL.

The ASA cannot resolve the URL.

The bookmark has been disabled.

The user cannot access the URL.

Answer

Explanation

https://community.cisco.com/t5/network-security/missing-ssl-vpn-bookmarks/td-p/1597023

Questions # 13:

Cisco AnyConnect Secure Mobility Client has been configured to use IKEv2 for one group of users and SSL for another group. When the administrator configures a new AnyConnect release on the Cisco ASA, the IKEv2 users cannot download it automatically when they connect. What might be the problem?

Options:

The XML profile is not configured correctly for the affected users.

The new client image does not use the same major release as the current one.

Client services are not enabled.

Client software updates are not supported with IKEv2.

Answer

Explanation

https://community.cisco.com/t5/vpn/anyconnect-service-port-not-enabled/td-p/2968124

Questions # 14:

Refer to the exhibit.

Question # 14

Which VPN technology is allowed for users connecting to the Employee tunnel group?

Options:

SSL AnyConnect

IKEv2 AnyConnect

crypto map

clientless

Answer

Explanation

When you configure other group policies, any attribute that you do not explicitly specify takes its value from the default group policy. To view the default group policy. https://www.cisco.com/c/en/us/td/docs/security/asa/asa72/configuration/guide/conf_gd/vpngrp.html

Questions # 15:

Which command identifies a Cisco AnyConnect profile that was uploaded to the flash of an IOS router?

Options:

svc import profile SSL_profile flash:simos-profile.xml

anyconnect profile SSL_profile flash:simos-profile.xml

crypto vpn anyconnect profile SSL_profile flash:simos-profile.xml

webvpn import profile SSL_profile flash:simos-profile.xml

Answer

Explanation

[Reference: https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/200533- AnyConnect-Configure-Basic-SSLVPN-for-I.html, ]

Questions # 16:

Which two types of web resources or protocols are enabled by default on the Cisco ASA Clientless SSL VPN portal? (Choose two.)

Options:

HTTP

ICA (Citrix)

VNC

RDP

CIFS

Answer

A, E

Explanation

HTTP (Hypertext Transfer Protocol) is used for transferring web resources, such as web pages and HTML documents, across the internet. CIFS (Common Internet File System) is used for sharing files and printers between computers on a network. ICA (Citrix), VNC (Virtual Network Computing), and RDP (Remote Desktop Protocol) are not enabled by default on the Cisco ASA Clientless SSL VPN portal.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa94/config-guides/cli/vpn/asa-94-vpn-config/webvpn-configure-gateway.html

Questions # 17:

Under which section must a bookmark or URL list be configured on a Cisco ASA to be available for clientless SSLVPN users?

Options:

tunnel-group (general-attributes)

tunnel-group (webvpn-attributes)

webvpn (group-policy)

webvpn (global configuration)

Answer

Explanation

https://www.cisco.com/c/en/us/td/docs/security/asa/asa97/configuration/vpn/asa-97-vpn-config/webvpn-configure-policy-groups.html says clearly: In group-policy webvpn configuration mode, you can specify (list of things, including url-list).

Questions # 18:

Refer to the exhibit.

Question # 18