Cisco 300-730 Exam
Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730) (Page 3 )

Updated On: 15-Feb-2026

Refer to the exhibit. Which two tunnel types produce the show crypto ipsec sa output seen in the exhibit? (Choose two.)

  1. crypto map
  2. DMVPN
  3. GRE
  4. FlexVPN
  5. VTI

Answer(s): B,E



Which two changes must be made in order to migrate from DMVPN Phase 2 to Phase 3 when EIGRP is configured? (Choose two.)

  1. Add NHRP shortcuts on the hub.
  2. Add NHRP redirects on the spoke.
  3. Disable EIGRP next-hop-self on the hub.
  4. Enable EIGRP next-hop-self on the hub.
  5. Add NHRP redirects on the hub.

Answer(s): C,E



Refer to the exhibit. A customer cannot establish an IKEv2 site-to-site VPN tunnel between two Cisco ASA devices. Based on the syslog message, which action brings up the VPN tunnel?

  1. Reduce the maximum SA limit on the local Cisco AS
  2. Increase the maximum in-negotiation SA limit on the local Cisco ASA.
  3. Remove the maximum SA limit on the remote Cisco ASA.
  4. Correct the crypto access list on both Cisco ASA devices.

Answer(s): B



Which two parameters help to map a VPN session to a tunnel group without using the tunnel-group list? (Choose two.)

  1. group-alias
  2. certificate map
  3. optimal gateway selection
  4. group-url
  5. AnyConnect client version

Answer(s): B,D



Which method dynamically installs the network routes for remote tunnel endpoints?

  1. policy-based routing
  2. CEF
  3. reverse route injection
  4. route filtering

Answer(s): C


Reference:

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_vpnav/configuration/12-4t/sec-vpn-availability-12-4t-book/sec-rev-rte-inject.html






Post your Comments and Discuss Cisco 300-730 exam prep with other Community members:

Join the 300-730 Discussion