Valid 300-730 Dumps shared by ExamDiscuss.com for Helping Passing 300-730 Exam! ExamDiscuss.com now offer the newest 300-730 exam dumps, the ExamDiscuss.com 300-730 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com 300-730 dumps with Test Engine here:
Refer to the exhibit. A network engineer is configuring remote access VPN on a Cisco IOS router but cannot establish a connection from the Cisco Secure Client client. Which action resolves the issue?
Correct Answer: D
In the given configuration, the trustpoint TP_AnyConnect is using a self-signed certificate (enrollment selfsigned). When using Cisco Secure Client (formerly AnyConnect) with IKEv2, the client expects a valid, trusted certificate issued by a Certificate Authority (CA). Since self-signed certificates are not trusted by default, the client may reject the connection, causing the VPN tunnel to fail. To resolve this issue, the engineer should: 1. Obtain and install a trusted CA-signed certificate on the router. 2. Update the crypto pki trustpoint configuration to use the new certificate. 3. Ensure the certificate Common Name (CN) and Subject Alternative Name (SAN) match the VPN gateway's FQDN.