1.6 Describe Site-To-Site and Remote Access VPN Deployment Types Such as Virtual Tunnel Interfaces, Standards-Based IPsec, SSL VPN, DMVPN, FlexVPN, and GETVPN 350-701 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A manufacturing company connects two sites with a site-to-site VPN. The network team wants to run OSPF across the VPN and route multiple subnets without creating a separate crypto map entry for each subnet pair. Which VPN technology simplifies this by treating the tunnel as a routable interface?

   • AClientless SSL VPN
   • BVirtual Tunnel Interface (VTI)
   • CGETVPN with a group key server
   • DDMVPN with static crypto maps
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A global enterprise wants to replace its legacy remote access VPN, which uses IKEv1 and requires separate configurations for site-to-site and remote access. The new solution must use a single standards-based protocol, support both hub-and-spoke and remote access, and allow dynamic routing. Which technology meets all these requirements?

   • AFlexVPN with IKEv2
   • BGETVPN with group keys
   • CDMVPN with IKEv1
   • DClientless SSL VPN
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the primary purpose of GETVPN's Group Domain of Interpretation (GDOI) protocol?

   • ATo authenticate remote access users before granting VPN access.
   • BTo distribute and manage encryption keys for a group of VPN devices.
   • CTo establish individual point-to-point tunnels between each pair of sites.
   • DTo translate private IP addresses to public IP addresses.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A company is deploying a site-to-site VPN and requires that the VPN tunnel remain operational even if one of the two routers is rebooted. The security team wants to minimize configuration complexity and avoid manual intervention. Which feature should be enabled?

   • ADead Peer Detection (DPD) with IKEv2
   • BGETVPN with a group key server
   • CStatic crypto maps with ACLs
   • DClientless SSL VPN
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is a primary benefit of DMVPN's spoke-to-spoke tunnels compared to a traditional hub-and-spoke VPN?

   • AThey require a dedicated MPLS circuit between each pair of sites.
   • BThey allow spokes to have dynamic IP addresses without any registration.
   • CThey eliminate the need for IPsec encryption between sites.
   • DThey reduce latency and bandwidth usage on the hub by allowing direct communication between spokes.
   Reveal Solution Discussion Select an answer first