Refer to the exhibit.

The DMVPN spoke is not establishing a session with the hub. Which two actions resolve this issue? (Choose two.)

• A.Change the ISAKMP key address on the spoke to 0.0.0.0.
• B.Change the ISAKMP policy authentication on the spoke to pre-shared.
• C.Change the nhrp authentication key on the spoke to cisco123.
• D.Change the spoke nhs to 172.16.18.1 and the nbma to 10.0.0.1.
• E.Change the transform set to mode tunnel.

Comment: *

Name: *

Email: *

Verification: *

An engineer is troubleshooting a new DMVPN setup on a Cisco IOS router. After the show crypto isakmp sa command is issued, a response is returned of "MM_NO_STATE." Why does this failure occur?

• A.Tunnel protection is not applied to the DMVPN tunnel.
• B.ESP traffic is being dropped.
• C.The Phase 1 policy does not match on both devices.
• D.The ISAKMP policy priority values are invalid.

Comment: *

Name: *

Email: *

Verification: *

Which two parameters help to map a VPN session to a tunnel group without using the tunnel-group list? (Choose two.)

• A.group-alias
• B.group-url
• C.optimal gateway selection
• D.AnyConnect client version
• E.certificate map

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

The VPN tunnel between the FlexVPN spoke and FlexVPN hub 192.168.0.12 is failing. What should be done to correct this issue?

• A.Add the tunnel mode gre ip command to the tunnel configuration.
• B.Add the address 192.168.0.12 255.255.255.255 command to the keyring configuration.
• C.Add the match fvrf any command to the IKEv2 policy.
• D.Add the aaa authorization group psk list Flex_AAA Flex_Auth command to the IKEv2 profile configuration.

Comment: *

Name: *

Email: *

Verification: *

Which two features are valid backup options for an IOS FlexVPN client? (Choose two.)

• A.HSRP stateless failover
• B.need distractor
• C.tunnel pivot
• D.DNS-based hub resolution
• E.reactivate primary peer

Comment: *

Name: *

Email: *

Verification: *