300-730 試験問題を無料オンラインアクセス

Refer to the exhibit. Which two conclusions should be drawn from the DMVPN phase 2 configuration? (Choose two.)

• A.Spoke-to-spoke communication is allowed.
• B.EIGRP is used as the dynamic routing protocol.
• C.EIGRP route redistribution is not allowed.
• D.EIGRP neighbor adjacency will fail.
• E.Next-hop-self is required.

A network engineer is installing Cisco AnyConnect on company laptops so that users can access corporate resources remotely. The VPN concentrator is a Cisco router running IOS-XE 16.9.1 code and configured as a FlexVPN server that uses local authentication and *$Cisc431089017$* as the key-id for the IKEv2 profile. Which two steps must be taken on the computer to allow a successful AnyConnect connection to the router? (Choose two.)

• A.In the Cisco AnyConnect XML profile, set the IPsec Authentication method to EAP-AnyConnect.
• B.In the Cisco AnyConnect Local Policy, set the BypassDownloader option in the local to true.
• C.In the Cisco AnyConnect Local Policy, add the router IP address to the Update Policy.
• D.In the Cisco AnyConnect XML profile, add the hostname and host address to the server list.
• E.In the Cisco AnyConnect XML profile, set the user group field to DefaultAnyConnectClientGroup.

Refer to the exhibit. The customer can establish an AnyConnect connection on the first attempt only. Subsequent attempts fail. What might be the issue?

• A.IKEv2 is blocked over the path.
• B.UserGroup must be different than the name of the connection profile.
• C.The primary protocol should be SSL.
• D.UserGroup must be the same as the name of the connection profile.

A network engineer must implement an SSLVPN Cisco AnyConnect solution that supports 500 concurrent users, ensures all traffic from the client passes through the ASA, and allows users to access all devices on the inside interface subnet (192.168.0.0/24). Assuming all other configuration is set up appropriately, which configuration implements this solution?

• A.
• B.
• C.
• D.

A network engineer has been tasked with configuring SSL VPN to provide remote users with access to the corporate network. Traffic destined to the enterprise IP range should go through the tunnel, and all other traffic should go directly to the Internet. Which feature should be configured to achieve this?

• A.split-tunnel
• B.hairpinning
• C.dual-homing
• D.U-turning