exam questions

Exam 300-420 All Questions

View all questions & answers for the 300-420 exam

Exam 300-420 topic 1 question 98 discussion

Actual exam question from Cisco's 300-420
Question #: 98
Topic #: 1
[All 300-420 Questions]

When IPsec VPNs are designed, what is a unique requirement if support for IP Multicast is required?

  • A. encapsulation of traffic with GRE or VTI
  • B. IPsec forwarding using transport mode
  • C. additional bandwidth for headend
  • D. IPsec forwarding using tunnel mode
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
rted
10 months ago
Dynamic routing protocols rely on using IP multicast or broadcast packets, but IPsec does not support encrypting multicast or broadcast packets. The current method for solving this problem is to use generic routing encapsulation (GRE) tunnels in combination with IPsec encryption. https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/41940-dmvpn.html
upvoted 1 times
...
salmarin
1 year, 3 months ago
Selected Answer: A
IPSec does not allow to transmit Multicast and Broadcast traffic via a IPSec VPN, so we should use GRE.
upvoted 1 times
...
Lungful
1 year, 8 months ago
Selected Answer: A
A is correct. IPsec does not natively support multicast traffic so encapsulation via GRE is commonly used.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago