Exam 300-420 topic 1 question 116 discussion

Actual exam question from Cisco's 300-420

Question #: 116
Topic #: 1

A company's security policy requires that all connections between sites be encrypted in a manner that does not require maintenance of permanent tunnels. The sites are connected through a private MPLS-based service that uses a dynamically changing key and spoke-to-spoke communication. Which type of transport encryption must be used in this environment?

A. GETVPN
B. DMVPN
C. GRE VPN
D. standard IPsec VPN

Show Suggested Answer

Suggested Answer: A 🗳️

by Hope66 at Sept. 3, 2022, 12:09 p.m.

Comments

Submit Cancel

iLikeHamburgers

Highly Voted 1 year, 7 months ago

Selected Answer: A

Standard IPsec VPN isn't correct because it is not dynamic. It is a permanent VPN tunnel solution. The requirements state that "does not require maintenance of permanent tunnels" DMVPN isn't correct because it is by design, a Hub and Spoke Architecture. The requirements state "spoke to spoke communication" GRE VPN isn't correct because a GRE VPN doesn't encrypt to secure the packets during transport. The requirements state "all connections between sites be encrypted" GETVPN is correct because it is the only one listed that is a "tunnel-less VPN". The requirements state "does not require maintenance of permanent tunnels.

upvoted 11 times