A company has a main office and a small branch office, each with its own internal network. They need to connect the two networks so that users in the branch can access file servers in the main office as if they were local. The branch has a fixed public IP address. Which type of VPN should be deployed?

Dynamic multipoint VPN (DMVPN) with a hub at the main office

SSL VPN portal accessed via web browser

IPsec remote access VPN with client software on each branch user's laptop

IPsec site-to-site VPN between the two office routers

A company is deploying IPsec remote access VPNs for 1,000 users. The security team requires strong authentication and the ability to revoke access for individual users quickly. Which authentication method should the VPN gateway use?

Pre-shared keys shared by all users

Digital certificates issued by a corporate CA

A network engineer is configuring an IPsec VPN and needs to ensure that the data is encrypted and that the integrity of the data is verified. The engineer also wants to protect against replay attacks. Which IPsec protocol provides all these services?

ISAKMP (Internet Security Association and Key Management Protocol)

ESP (Encapsulating Security Payload)

A company has 500 remote employees who need to access internal applications from various locations. The company wants a VPN solution that is easy to deploy and manage for a large number of users. Which VPN type is most appropriate?

Remote access VPN with client software on each employee's device

Site-to-site VPN between each employee's home router and the corporate gateway

A DMVPN hub-and-spoke network with each employee as a spoke

A single site-to-site VPN tunnel shared by all remote employees

CiscoCertified Network Associate (CCNA)

Domain 5Objective 5

5.5 Describe IPsec Remote Access and Site-To-Site VPNs 200-301 Practice Questions (Page 7)

Part of the Security Fundamentals domain, which accounts for 15% of the 200-301 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

7concepts

15%of the exam

Questions 31–35

31application · medium
A company has a main office and a small branch office, each with its own internal network. They need to connect the two networks so that users in the branch can access file servers in the main office as if they were local. The branch has a fixed public IP address. Which type of VPN should be deployed?
Select an answer first
32expert · hard
A company is deploying IPsec remote access VPNs for 1,000 users. The security team requires strong authentication and the ability to revoke access for individual users quickly. Which authentication method should the VPN gateway use?
Select an answer first
33application · medium
A network engineer is configuring an IPsec VPN and needs to ensure that the data is encrypted and that the integrity of the data is verified. The engineer also wants to protect against replay attacks. Which IPsec protocol provides all these services?
Select an answer first
34application · medium
A company is deploying an IPsec remote access VPN for its employees. The VPN gateway is behind a NAT device. Which feature must be enabled on the VPN gateway to allow IPsec traffic to traverse NAT?
Select an answer first
35application · medium
A company has 500 remote employees who need to access internal applications from various locations. The company wants a VPN solution that is easy to deploy and manage for a large number of users. Which VPN type is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-301

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-301” is a trademark of its owner, used for identification only.

5.5 Describe IPsec Remote Access and Site-To-Site VPNs 200-301 Practice Questions (Page 7)

Questions 31–35

A company is deploying IPsec remote access VPNs for 1,000 users. The security team requires strong authentication and the ability to revoke access for individual users quickly. Which authentication method should the VPN gateway use?

A network engineer is configuring an IPsec VPN and needs to ensure that the data is encrypted and that the integrity of the data is verified. The engineer also wants to protect against replay attacks. Which IPsec protocol provides all these services?

A company is deploying an IPsec remote access VPN for its employees. The VPN gateway is behind a NAT device. Which feature must be enabled on the VPN gateway to allow IPsec traffic to traverse NAT?

A company has 500 remote employees who need to access internal applications from various locations. The company wants a VPN solution that is easy to deploy and manage for a large number of users. Which VPN type is most appropriate?

Keep studying — Security Fundamentals