Exam : 300-730 Implementing Secure Solutions with Virtual Private Networks (SVPN)

Total Questions: 60
-------------------------------------------------------------------------------------------------------------------------------

e
tic
ac
Pr
x am
tE
es
:B
ay
Eb

Ebay: BestExamPractice
QUESTION 1
A Cisco AnyConnect client establishes a SSL VPN connection with an ASA at the corporate office. An engineer must ensure that the client computer meets the enterprise security policy. Which feature can update the client to meet an
enterprise security policy?

A. Endpoint Assessment
B. Cisco Secure Desktop
C. Basic Host Scan
D. Advanced Endpoint Assessment

Correct Answer: D

QUESTION 2

Which two statements about the Cisco ASA Clientless SSL VPN solution are true? (Choose
two.)

e
tic
A. When a client connects to the Cisco ASA WebVPN portal and tries to access HTTP resources through the URL bar, the client uses the local DNS to perform FQDN resolution.
B. The rewriter enable command under the global webvpn configuration enables the rewriter functionality because that feature is disabled by default.
C. A Cisco ASA can simultaneously allow Clientless SSL VPN sessions and AnyConnect client sessions.

ac
D. When a client connects to the Cisco ASA WebVPN portal and tries to access HTTP resources through the URL bar, the ASA uses its configured DNS servers to perform FQDN resolution.
E. Clientless SSLVPN provides Layer 3 connectivity into the secured network.

Pr
Correct Answer: CD

am
QUESTION 3

x
tE
es
:B
ay

Refer to the exhibit. The DMVPN tunnel is dropping randomly and no tunnel protection is configured. Which spoke configuration mitigates tunnel drops?
Eb

A.

Ebay: BestExamPractice
B.

e
tic
ac
Pr
am
C.

x
tE
es
:B
ay
Eb

Ebay: BestExamPractice
D.

e
tic
ac
Pr
am
Correct Answer: D

x
tE
QUESTION 4
Which feature of GETVPN is a limitation of DMVPN and FlexVPN?

es
A. sequence numbers that enable scalable replay checking
B. enabled use of ESP or AH
:B
C. design for use over public or private WAN
D. no requirement for an overlay routing protocol
ay
Correct Answer: D

QUESTION 5
Eb

Which parameter is initially used to elect the primary key server from a group of key
servers?

A. code version
B. highest IP address
C. highest-priority value
D. lowest IP address

Correct Answer: C

QUESTION 6

Ebay: BestExamPractice
 e
tic
ac
Pr
Refer to the exhibit. Which two tunnel types produce the show crypto ipsec sa output seen in the exhibit? (Choose two.)

am
A. crypto map
B. DMVPN
C. GRE

x
D. FlexVPN

tE
E. VTI

Correct Answer: BE

es
QUESTION 7
:B
Which two remote access VPN solutions support SSL? (Choose
two.)
ay

A. FlexVPN
B. clientless
Eb

C. EZVPN
D. L2TP
E. Cisco AnyConnect

Correct Answer: BE

QUESTION 8

Ebay: BestExamPractice
Refer to the exhibit. A customer cannot establish an IKEv2 site-to-site VPN tunnel between two Cisco ASA devices. Based on the syslog message, which action brings up the VPN tunnel?

A. Reduce the maximum SA limit on the local Cisco ASA.

B. Increase the maximum in-negotiation SA limit on the local Cisco ASA.
C. Remove the maximum SA limit on the remote Cisco ASA.
D. Correct the crypto access list on both Cisco ASA devices.

e
Correct Answer: B

tic
ac
QUESTION 9 Which two parameters help to map a VPN session to a tunnel group without using the tunnel-group list?
(Choose two.)

Pr
A. group-alias
B. certificate map
C. optimal gateway selection

am
D. group-url
E. AnyConnect client version

x
Correct Answer: BD

tE
es
QUESTION 10 Which method dynamically installs the network routes for remote
tunnel endpoints?

A. policy-based routing
:B
B. CEF
C. reverse route injection
ay
D. route filtering

Correct Answer: C
Eb

Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_vpnav/configuration/12-4t/sec-vpn-availability-12-4t-book/sec-rev-rte-inject.html

QUESTION 11 Which command identifies a Cisco AnyConnect profile that was uploaded to the flash of
an IOS router?

A. svc import profile SSL_profile flash:simos-profile.xml

B. anyconnect profile SSL_profile flash:simos-profile.xml
C. crypto vpn anyconnect profile SSL_profile flash:simos-profile.xml
D. webvpn import profile SSL_profile flash:simos-profile.xml

Ebay: BestExamPractice
Correct Answer: C

Reference: https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/200533-AnyConnect-Configure-Basic-SSLVPN-for-I.html

QUESTION 12

e
tic
ac
Pr
x am
tE
es
:B
ay
Eb

Refer to the exhibit. Which value must be configured in the User Group field when the Cisco AnyConnect Profile is created to connect to an ASA headend with IPsec as the primary protocol?

A. address-pool
B. group-alias
C. group-policy
D. tunnel-group

Correct Answer: D

Reference: https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect41/administration/guide/b_AnyConnect_Administrator_Guide_4-1/configure-vpn.html

Ebay: BestExamPractice
QUESTION 13

e
tic
ac
Pr
x am
tE
es
:B
ay
Eb

Refer to the exhibit. What is configured as a result of this command set?

A. FlexVPN client profile for IPv6

B. FlexVPN server to authorize groups by using an IPv6 external AAA
C. FlexVPN server for an IPv6 dVTI session

Ebay: BestExamPractice
D. FlexVPN server to authenticate IPv6 peers by using EAP

Correct Answer: A

Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_ike2vpn/configuration/xe-3s/sec-flex-vpn-xe-3s-book/sec-cfg-flex-clnt.html

QUESTION 14
Which two types of web resources or protocols are enabled by default on the Cisco ASA Clientless SSL VPN portal? (Choose two.)

A. HTTP
B. ICA (Citrix)
C. VNC
D. RDP

e
E. CIFS

tic
Correct Answer: DE

ac
Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa94/config-guides/cli/vpn/asa-94-vpn-config/webvpn-configure-gateway.html

Pr
QUESTION 15 Which configuration construct must be used in a
FlexVPN tunnel?

am
A. EAP configuration
B. multipoint GRE tunnel interface
C. IKEv1 policy

x
D. IKEv2 profile

tE
Correct Answer: D

es
QUESTION 16
DRAG DROP
:B
Drag and drop the correct commands from the night onto the blanks within the code on the left to implement a design that allow for dynamic spoke-to-spoke communication. Not all comments are used.
ay

Select and Place:

Eb

Ebay: BestExamPractice
 e
tic
ac
Pr
x am
tE
es
:B
ay
Eb

Correct Answer:

Ebay: BestExamPractice
 e
tic
ac
Pr
x am
tE
es
:B
ay
Eb

QUESTION 17 Which two features provide headend resiliency for Cisco AnyConnect
clients? (Choose two.)

A. AnyConnect Auto Reconnect

B. AnyConnect Network Access Manager

Ebay: BestExamPractice
C. AnyConnect Backup Servers
D. ASA failover
E. AnyConnect Always On

Correct Answer: CD

QUESTION 18
Cisco AnyConnect Secure Mobility Client has been configured to use IKEv2 for one group of users and SSL for another group. When the administrator configures a new AnyConnect release on the Cisco ASA, the IKEv2 users cannot
download it automatically when they connect. What might be the problem?

A. The XML profile is not configured correctly for the affected users.
B. The new client image does not use the same major release as the current one.
C. Client services are not enabled.

e
D. Client software updates are not supported with IKEv2.

tic
Correct Answer: C

ac
QUESTION 19

Pr
Under which section must a bookmark or URL list be configured on a Cisco ASA to be available for clientless SSLVPN users?

A. tunnel-group (general-attributes)

am
B. tunnel-group (webvpn-attributes)
C. webvpn (group-policy)
D. webvpn (global configuration)

x
Correct Answer: D

tE
es
QUESTION 20
:B
ay
Eb

Ebay: BestExamPractice
 e
tic
ac
Pr
Refer to the exhibit. Based on the exhibit, why are users unable to access CCNP Webserver bookmark?

am
A. The URL is being blocked by a WebACL.
B. The ASA cannot resolve the URL.

x
C. The bookmark has been disabled.
D. The user cannot access the URL.

tE
Correct Answer: C

es
QUESTION 21
:B
ay
A second set of traffic selectors is negotiated between two peers using IKEv2. Which IKEv2 packet will contain details of the exchange?
A. IKEv2 IKE_SA_INIT
Eb

Ebay: BestExamPractice
B. IKEv2 INFORMATIONAL
C. IKEv2 CREATE_CHILD_SA
D. IKEv2 IKE_AUTH

Correct Answer: B

QUESTION 22
Which feature allows the ASA to handle nonstandard applications and web resources so that they display correctly over a clientless SSL VPN connection?

A. single sign-on
B. Smart Tunnel
C. WebType ACL
D. plug-ins
Correct Answer: B

e
tic
Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/vpn_clientless_ssl.html#29951

ac
QUESTION 23 Which command automatically initiates a smart tunnel when a user logs in to the
WebVPN portal page?

Pr
A. auto-upgrade
B. auto-connect

am
C. auto-start
D. auto-run

x
Correct Answer: C

tE
es
Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/vpn/asa_91_vpn_config/webvpn-configure-policy-group.html

QUESTION 24 :B
ay
Eb

Refer to the exhibit. The customer must launch Cisco AnyConnect in the RDP machine. Which IOS configuration accomplishes this task?

A.

B.

Ebay: BestExamPractice
C.

e
tic
D.

ac
Pr
am
Correct Answer: C

x
tE
Reference: https://community.cisco.com/t5/vpn/starting-anyconnect-vpn-through-rdp-session-on-cisco-891/td-p/2128284

QUESTION 25

es
:B
ay
Eb

Refer to the exhibit. Which two commands under the tunnel-group webvpn-attributes result in a Cisco AnyConnect user
Ebay: receiving the AnyConnect prompt in the exhibit? (Choose two.)
BestExamPractice
A. group-url https://172.16.31.10/General
enable
B. group-policy General internal
C. authentication aaa
D. authentication certificate
E. group-alias General enable

Correct Answer: BE

QUESTION 26
Which requirement is needed to use local authentication for Cisco AnyConnect Secure Mobility Clients that connect to a FlexVPN server?
A. use of certificates instead of username and password
B. EAP-AnyConnect

e
C. EAP query-identity

tic
D. AnyConnect profile

Correct Answer: D

ac
Pr
Reference: https://www.cisco.com/c/en/us/support/docs/security/flexvpn/200555-FlexVPN-AnyConnect-IKEv2-Remote-Access.html

am
QUESTION 27 Which IKE identity does an IOS/IOS-XE headend expect to receive if an IPsec Cisco AnyConnect client uses
default settings?

A. *$SecureMobilityClient$*

x
B. *$AnyConnectClient$*

tE
C. *$RemoteAccessVpnClient$*
D. *$DfltlkeldentityS*

es
Correct Answer: B
:B
Reference: https://www.cisco.com/c/en/us/support/docs/security/flexvpn/200555-FlexVPN-AnyConnect-IKEv2-Remote-Access.html
ay
QUESTION 28
Eb

Ebay: BestExamPractice
 e
tic
ac
Pr
x am
tE
es
Refer to the exhibit. Which VPN technology is allowed for users connecting to the Employee tunnel group?

A. SSL AnyConnect :B
B. IKEv2 AnyConnect
C. crypto map
D. clientless
ay

Correct Answer: B
Eb

QUESTION 29

Ebay: BestExamPractice
 e
tic
ac
Pr
am
Refer to the exhibit. An engineer is troubleshooting a new GRE over IPsec tunnel. The tunnel is established but the engineer cannot ping from spoke 1 to spoke 2. Which type of traffic is being blocked?

x
tE
A. ESP packets from spoke2 to spoke1
B. ISAKMP packets from spoke2 to spoke1
C. ESP packets from spoke1 to spoke2

es
D. ISAKMP packets from spoke1 to spoke2

Correct Answer: A
:B
ay
QUESTION 30

On a FlexVPN hub-and-spoke topology where spoke-to-spoke tunnels are not allowed, which command is needed for the hub to be able to terminate FlexVPN tunnels?
Eb

A. interface virtual-access
B. ip nhrp redirect
C. interface tunnel
D. interface virtual-template

Correct Answer: D

QUESTION 31
In a FlexVPN deployment, the spokes successfully connect to the hub, but spoke-to-spoke tunnels do not form. Which troubleshooting step solves the issue?
A. Verify the spoke configuration to check if the NHRP redirect is enabled.
B. Verify that the spoke receives redirect messages and sends resolution requests.
C. Verify the hub configuration to check if the NHRP shortcut is enabled.
D. Verify that the tunnel interface is contained within a VRF.
Ebay: BestExamPractice
Correct Answer: B

Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dmvpn/configuration/15-mt/sec-conn-dmvpn-15-mt-book/sec-conn-dmvpn-summ-maps.pdf

QUESTION 32 An engineer is troubleshooting a new DMVPN setup on a Cisco IOS router. After the show crypto isakmp sa command is issued, a response is returned of "MM_NO_STATE." Why does
this failure occur?

A. The ISAKMP policy priority values are invalid.

B. ESP traffic is being dropped.
C. The Phase 1 policy does not match on both devices.
D. Tunnel protection is not applied to the DMVPN tunnel.

Correct Answer: B

e
tic
QUESTION 33

ac
Pr
x am
tE
es
:B
ay
Eb

Refer to the exhibit. The customer can establish a Cisco AnyConnect connection without using an XML profile. When the host "ikev2" is selected in the AnyConnect drop down, the connection fails. What is the cause of this issue?

A. The HostName is incorrect.

B. The IP address is incorrect.

C. Primary protocol should be SSL.
D. UserGroup must match connection profile.

Ebay: BestExamPractice
Correct Answer: D

Reference: https://community.cisco.com/t5/security-documents/anyconnect-xml-settings/ta-p/3157891

QUESTION 34

e
tic
ac
Pr
x am
tE
es
:B
ay
Eb

Refer to the exhibit. A site-to-site tunnel between two sites is not coming up. Based on the debugs, what is the cause of this issue?

A. An authentication failure occurs on the remote peer.

B. A certificate fragmentation issue occurs between both sides.
C. UDP 4500 traffic from the peer does not reach the router.
D. An authentication failure occurs on the router.

Correct Answer: C

Ebay: BestExamPractice
QUESTION 35

e
tic
ac
Pr
x am
tE
es
Refer to the exhibit. Based on the debug output, which type of mismatch is preventing the VPN from coming up?

A. interesting traffic
:B
B. lifetime
C. preshared key
ay

D. PFS

Correct Answer: B
Eb

Explanation:
If the responder's policy does not allow it to accept any part of the proposed Traffic Selectors, it responds with a TS_UNACCEPTABLE Notify message.

Ebay: BestExamPractice
QUESTION 36

e
tic
ac
Pr
x am
tE
es
:B
ay
Eb

Ebay: BestExamPractice
Refer to the exhibit. The IKEv2 site-to-site VPN tunnel between two routers is down. Based on the debug output, which type of mismatch is the problem?

A. preshared key
B. peer identity
C. transform set
D. ikev2 proposal

Correct Answer: B

QUESTION 37

e
tic
ac
Pr
Refer to the exhibit. Which type of mismatch is causing the problem with the IPsec VPN tunnel?

am
A. crypto access list
B. Phase 1 policy
C. transform set
D. preshared key

x
tE
Correct Answer: D

es
Reference: https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/5409-ipsec-debug-00.html#ike

QUESTION 38
:B
ay
Eb

Ebay: BestExamPractice
 e
tic
ac
Pr
x am
tE
es
:B
ay
Eb

Refer to the exhibit. What is a result of this configuration?

A. Spoke 1 fails the authentication because the authentication methods are incorrect.
B. Spoke 2 passes the authentication to the hub and successfully proceeds to phase 2.
C. Spoke 2 fails the authentication because the remote authentication method is incorrect.

Ebay: BestExamPractice
D. Spoke 1 passes the authentication to the hub and successfully proceeds to phase 2.

Correct Answer: A

QUESTION 39

e
tic
ac
Pr
x am
tE
es
:B
Refer to the exhibit. Client 1 cannot communicate with client 2. Both clients are using Cisco AnyConnect and have established a successful SSL VPN connection to the hub ASA. Which command on the ASA is missing?

A. dns-server value 10.1.1.2

ay
B. same-security-traffic permit intra-interface
C. same-security-traffic permit inter-interface
D. dns-server value 10.1.1.3
Eb

Correct Answer: B

QUESTION 40

Ebay: BestExamPractice
 e
tic
ac
Pr
x am
tE
es
:B
ay
Eb

Ebay: BestExamPractice
Refer to the exhibit. An SSL client is connecting to an ASA headend. The session fails with the message “Connection attempt has timed out. Please verify Internet connectivity.” Based on how the packet is processed, which phase is causing
the failure?

A. phase 9: rpf-check
B. phase 5: NAT
C. phase 4: ACCESS-LIST
D. phase 3: UN-NAT

Correct Answer: D

QUESTION 41

e
Which command is used to troubleshoot an IPv6 FlexVPN spoke-to-hub connectivity
failure?

tic
A. show crypto ikev2 sa

ac
B. show crypto isakmp sa
C. show crypto gkm
D. show crypto identity

Pr
Correct Answer: A

x am
QUESTION 42 Which technology works with IPsec
stateful failover?

tE
A. GLBR

es
B. HSRP
C. GRE
D. VRRP :B
Correct Answer: B
ay

Reference: https://www.cisco.com/c/en/us/td/docs/ios/12_2/12_2y/12_2yx11/feature/guide/ft_vpnha.html#wp1122512
Eb

QUESTION 43
What are two functions of ECDH and ECDSA? (Choose two.)

A. nonrepudiation
B. revocation
C. digital signature
D. key exchange
E. encryption

Correct Answer: CD

Ebay: BestExamPractice
Reference: https://tools.cisco.com/security/center/resources/next_generation_cryptography

QUESTION 44 What uses an Elliptic Curve key

exchange algorithm?

A. ECDSA
B. ECDHE
C. AES-GCM
D. SHA

Correct Answer: B

e
Reference: https://blog.cloudflare.com/a-relatively-easy-to-understand-primer-on-elliptic-curve-cryptography/

tic
QUESTION 45

ac
Pr
x am
tE
es
:B
ay
Eb

Refer to the exhibit. Cisco AnyConnect must be set up on a router to allow users to access internal servers 192.168.0.10 and 192.168.0.11. All other traffic should go out of the client's local NIC. Which command accomplishes this
configuration?

A. svc split include 192.168.0.0 255.255.255.0

B. svc split exclude 192.168.0.0 255.255.255.0
C. svc split include acl CCNP
D. svc split exclude acl CCNP

Correct Answer: C

QUESTION 46
Which VPN solution uses TBAR? Ebay: BestExamPractice
A. GETVPN
B. VTI
C. DMVPN
D. Cisco AnyConnect

Correct Answer: A

Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_getvpn/configuration/xe-3s/sec-get-vpn-xe-3s-book/sec-get-vpn.html

QUESTION 47 Which two commands help determine why the NHRP registration process is not being completed even after the IPsec tunnel is up?
(Choose two.)

A. show crypto isakmp sa

e
B. show ip traffic
C. show crypto ipsec sa

tic
D. show ip nhrp traffic
E. show dmvpn detail

ac
Correct Answer: AD

Pr
am
QUESTION 48

x
tE
es
:B
ay
Eb

Refer to the exhibit. All internal clients behind the ASA are port address translated to the public outside interface that has an IP address of 3.3.3.3. Client 1 and client 2 have established successful SSL VPN connections to the ASA. What
must be implemented so that "3.3.3.3" is returned from a browser search on the IP address?

A. Same-security-traffic permit inter-interface under Group Policy

B. Exclude Network List Below under Group Policy
C. Tunnel All Networks under Group Policy
D. Tunnel Network List Below under Group Policy
Ebay: BestExamPractice
Correct Answer: D
QUESTION 49
Cisco AnyConnect clients need to transfer large files over the VPN sessions. Which protocol provides the best throughput?

A. SSL/TLS
B. L2TP
C. DTLS
D. IPsec IKEv1
Correct Answer: C

e
QUESTION 50

tic
ac
Pr
x am
tE
es
:B
ay
Eb

Refer to the exhibit. Which VPN technology is used in the exhibit?

A. DVTI
B. VTI
C. DMVPN
D. GRE

Correct Answer: B

Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_vpnips/configuration/zZ-Archive/IPsec_Virtual_Tunnel_Interface.html#GUID-EB8C433B-2394-42B9-997F-B40803E58A91

QUESTION 51
Which VPN does VPN load balancing on the ASA support?

A. VTI
B. IPsec site-to-site tunnels
Ebay: BestExamPractice
C. L2TP over IPsec
D. Cisco AnyConnect

Correct Answer: D

QUESTION 52 Which parameter must match on all routers in a DMVPN

Phase 3 cloud?

A. GRE tunnel key

B. NHRP network ID
C. tunnel VRF
D. EIGRP split-horizon setting

e
Correct Answer: A

tic
ac
QUESTION 53 Which redundancy protocol must be implemented for IPsec stateless
failover to work?

Pr
A. SSO

am
B. GLBP
C. HSRP
D. VRRP

x
Correct Answer: C

tE
es
QUESTION 54 A Cisco ASA is configured in active/standby mode. What is needed to ensure that Cisco AnyConnect users can connect after a
failover event?

A. AnyConnect images must be uploaded to both failover ASA devices.

:B
B. The vpnsession-db must be cleared manually.
C. Configure a backup server in the XML profile.
ay
D. AnyConnect client must point to the standby IP address.

Correct Answer: A
Eb

Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/ha_active_standby.html

QUESTION 55 Which benefit of FlexVPN is a limitation of

DMVPN using IKEv1?

A. GRE encapsulation allows for forwarding of non-IP traffic.

B. IKE implementation can install routes in routing table.
C. NHRP authentication provides enhanced security.
D. Dynamic routing protocols can be configured.

Correct Answer: B

Ebay: BestExamPractice
QUESTION 56 What is a requirement for smart tunnels to
function properly?

A. Java or ActiveX must be enabled on the client machine.

B. Applications must be UDP.
C. Stateful failover must not be configured.
D. The user on the client machine must have admin access.

Correct Answer: A

Reference: https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/111007-smart-tunnel-asa-00.html

e
QUESTION 57 Where is split tunneling defined for IKEv2 remote access clients on

tic
a Cisco router?

A. IKEv2 authorization policy

ac
B. Group Policy
C. virtual template

Pr
D. webvpn context

Correct Answer: B

x am
QUESTION 58 Which technology is used to send multicast traffic over a

tE
site-to-site VPN?

es
A. GRE over IPsec on IOS router
B. GRE over IPsec on FTD
C. IPsec tunnel on FTD :B
D. GRE tunnel on ASA

Correct Answer: B
ay
Eb

QUESTION 59

Which statement about GETVPN is true?

A. The configuration that defines which traffic to encrypt originates from the key server.
B. TEK rekeys can be load-balanced between two key servers operating in COOP.
C. The pseudotime that is used for replay checking is synchronized via NTP.
D. Group members must acknowledge all KEK and TEK rekeys, regardless of configuration.

Correct Answer: A

QUESTION 60

Which two changes must be made in order to migrate from DMVPN Phase 2 to Phase 3 when EIGRP is configured? (Choose
two.) Ebay: BestExamPractice
A. Add NHRP shortcuts on the hub.
B. Add NHRP redirects on the spoke.
C. Disable EIGRP next-hop-self on the hub.
D. Enable EIGRP next-hop-self on the hub.
E. Add NHRP redirects on the hub.

Correct Answer: CE

---------------------------------------------------------------------------
---------------------------------------------------------------------

e
tic
ac
Pr
x am
tE
es
:B
ay
Eb

Ebay: BestExamPractice