CiscoCertified Network Associate (CCNA)
Domain 5Objective 5
5.5 Describe IPsec Remote Access and Site-To-Site VPNs 200-301 Practice Questions (Page 8)
Part of the Security Fundamentals domain, which accounts for 15% of the 200-301 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)
38questions here
8free pages
7concepts
15%of the exam
Questions 36–38
- 36
A network administrator is troubleshooting an IPsec VPN that is not passing traffic. The administrator checks the security associations (SAs) and sees that the IKE phase 1 SA is active, but there are no IPsec SAs. What is the most likely cause?
Select an answer first - 37
A network engineer is configuring a site-to-site IPsec VPN between two routers. The engineer wants to ensure that the VPN is secure and that the original IP headers of the internal hosts are not exposed. The engineer also wants to use a protocol that provides encryption and integrity. Which configuration should be used?
Select an answer first - 38
A VPN administrator is explaining the IKE process to a junior engineer. The junior asks: 'During IKE phase 1, what is the main purpose of the Diffie-Hellman exchange?' Which answer is correct?
Select an answer first
Finished these 3 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to 200-301
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-301” is a trademark of its owner, used for identification only.