A second set of traffic selectors is negotiated between two peers using IKEv2. Which IKEv2 packet will contain details of the exchange?

• A.IKEv2 IKE_SA_INIT
• B.IKEv2 INFORMATIONAL
• C.IKEv2 CREATE_CHILD_SA
• D.IKEv2 IKE_AUTH

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

What is a result of this configuration?

• A.Spoke 2 passes the authentication to the hub and successfully proceeds to phase 2.
• B.Spoke 2 fails the authentication because the remote authentication method is incorrect.
• C.Spoke 1 fails the authentication because the authentication methods are incorrect.
• D.Spoke 1 passes the authentication to the hub and successfully proceeds to phase 2.

Comment: *

Name: *

Email: *

Verification: *

Which redundancy protocol must be implemented for IPsec stateless failover to work?

• A.SSO
• B.GLBP
• C.HSRP
• D.VRRP

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

An engineer must allow Cisco AnyConnect users to access the outside interface using protocol UDP 500/4500. In addition, these clients must be able to establish an SSL connection to update Cisco AnyConnect software over the same connection. Which two actions must be taken to achieve this goal? (Choose two.)

• A.SSL Enable DTLS must be checked on the outside interface.
• B.IPsec (IKEv2) Allow Access must be checked on the outside interface.
• C.SSL Allow Access must be checked on the outside interface.
• D.Bypass interface access lists for inbound VPN sessions must be unchecked.
• E.IPsec (IKEv2) Enable Client Services must be checked on the outside interface.

Comment: *

Name: *

Email: *

Verification: *

Which benefit of FlexVPN is a limitation of DMVPN using IKEv1?

• A.IKE implementation can install routes in routing table.
• B.NHRP authentication provides enhanced security.
• C.Dynamic routing protocols can be configured.
• D.GRE encapsulation allows for forwarding of non-IP traffic.

Comment: *

Name: *

Email: *

Verification: *