What is the primary reason for using GRE over IPsec instead of IPsec alone?

GRE reduces the overhead of IPsec by compressing the headers.

GRE provides stronger encryption than IPsec.

GRE eliminates the need for routing protocols in the tunnel.

GRE can carry multiprotocol traffic (e.g., IPv6, multicast) and routing protocols, while IPsec alone typically only protects unicast IP traffic.

Which IPsec protocol provides data confidentiality by encrypting the payload?

ISAKMP (Internet Security Association and Key Management Protocol)

ESP (Encapsulating Security Payload)

A network engineer is configuring a new VRF on a Cisco IOS XE router. The engineer creates the VRF, assigns an interface to it, and then configures a static route in the VRF. However, the route does not appear in the VRF's routing table. What is the most likely cause?

The VRF is not enabled for IPv4 unicast routing.

The static route's next-hop is not in the VRF.

The interface assigned to the VRF is shut down.

The static route was configured in the global routing table instead of the VRF.

What is the role of IKE (Internet Key Exchange) in an IPsec VPN?

To encapsulate the original packet in a new IP header.

To negotiate security associations and exchange keys used by IPsec to protect data.

To encrypt the data payload of each IP packet.

To provide authentication of the data packets using a hash.

CiscoCertified Network Professional Enterprise

Domain 2Objective 2

2.2 Configure and Verify Data Path Virtualization Technologies 350-401 Practice Questions (Page 3)

Part of the 2.0 Virtualization domain, which accounts for 10% of the 350-401 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–8 in this domain), expect 2–3 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

8concepts

10%of the exam

Questions 11–15

11foundation · easy
What is the primary reason for using GRE over IPsec instead of IPsec alone?
Select an answer first
12application · medium
A site-to-site IPsec VPN is configured with a crypto map on the outside interface. The tunnel does not come up. Which command should you use to verify the IKE phase 1 status?
Select an answer first
13foundation · easy
Which IPsec protocol provides data confidentiality by encrypting the payload?
Select an answer first
14application · medium
A network engineer is configuring a new VRF on a Cisco IOS XE router. The engineer creates the VRF, assigns an interface to it, and then configures a static route in the VRF. However, the route does not appear in the VRF's routing table. What is the most likely cause?
Select an answer first
15foundation · easy
What is the role of IKE (Internet Key Exchange) in an IPsec VPN?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-401” is a trademark of its owner, used for identification only.