Question 1

Refer to the exhibit.

Which component must be configured on routers for a GETVPN deployment work properly?

Options :

A : PE3: Key Server – Customer 2 CEs: Group Members

B : Customer 1 CE1: Key Server – R1 and Customer 1 CE2: Group Members

C : R1: Key Server – Customer 1 CEs: Group Members

D : PE3: Key Server – all CEs: Group Members

Answer: A

Question 2

Refer to the exhibit.

An engineer is building an IKEv1 tunnel to a peer Cisco ASA, but the tunnel is failing. Based on the configuration in the exhibit, which action must be taken to allow the VPN tunnel to come up?

Options :

A : Add a route for the 10.7.7.0/24 network to egress the outside interface.

B : Enable IKEv1 on the outside interface.

C : Change the IKEv1 policy number to be at least 256.

D : Change the transform set mode to transport.

Answer: B

Question 3

300-730-page53-image11

Refer to the exhibit. What is configured as a result of this command set?

Options :

A : FlexVPN client profile for IPv6

B : FlexVPN server to authorize groups by using an IPv6 external AAA

C : FlexVPN server for an IPv6 dVTI session

D :

FlexVPN server to authenticate IPv6 peers by using EAP

Answer: A

Question 4

Which command automatically initiates a smart tunnel when a user logs in to the WebVPN portal page?

Options :

A : auto-upgrade

B : auto-connect

C : auto-start

D :

auto-run

Answer: C

Question 5

A network engineer is configuring a server. The router will terminate encrypted VPN connections on g0/0, which is in the VRF "Internet". The cleartext traffic that must be encrypted before being sent out traverses g0/1, which is in the VRF "Internal". Which two VRF-specific configurations allow

VPN traffic to traverse the VRF-aware interfaces? (Choose two.)

Options :

A : Under the IKEv2 profile, add the ivrf Internal command.

B : Under the virtual-template interface, add the ip vrf forwarding Internet command.

C : Under the IKEv2 profile, add the match fvrf Internal command.

D : Under the IKEv2 profile, add the match fvrf Internet command

E : Under the virtual-template interface, add the tunnel vrf Internet command.

Answer: B,D