exam questions

Exam 300-415 All Questions

View all questions & answers for the 300-415 exam

Exam 300-415 topic 1 question 440 discussion

Actual exam question from Cisco's 300-415
Question #: 440
Topic #: 1
[All 300-415 Questions]

Which value of the IPsec rekey timer must be set by the engineer for an OMP graceful restart value set for 24 hours?

  • A. 6 hours
  • B. 12 hours
  • C. 36 hours
  • D. 48 hours
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
2e6bc5f
3 weeks, 6 days ago
Selected Answer: D
In Cisco SD-WAN, when setting the OMP graceful restart timer, the IPsec rekey timer must be set to at least twice the OMP graceful restart interval. • OMP graceful restart = 24 hours • Required IPsec rekey timer = 2 × 24 = 48 hours This ensures that IPsec tunnels remain valid long enough during the OMP restart window to prevent tunnel teardown.
upvoted 1 times
...
jhgt2000
4 months, 1 week ago
Selected Answer: D
https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/ios-xe-17/security-book-xe/configure-security-param.html
upvoted 1 times
...
jawad_khalife
4 months, 3 weeks ago
Selected Answer: D
The default OMP graceful restart value is 12 hours and can be set to a maximum of 604,800 seconds, which is equivalent to 7 days. The IPsec rekey timer is set to 24 hours by default, and although both timers are configurable, the IPsec rekey timer must be at least two times the value of the OMP graceful restart timer. https://rafaesil.medium.com/ccie-ep-16-def-sd-wan-self-efficiency-experience-sec-65c6d4412733#:~:text=The%20default%20OMP%20graceful%20restart,the%20OMP%20graceful%20restart%20timer. Answer shold be D
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago