CiscoCertified Network Professional Security
Domain 1Objective 6
1.6 Describe Site-To-Site and Remote Access VPN Deployment Types Such as Virtual Tunnel Interfaces, Standards-Based IPsec, SSL VPN, DMVPN, FlexVPN, and GETVPN 350-701 Practice Questions (Page 6)
Part of the Security Concepts domain, which accounts for 20% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)
30questions here
6free pages
6concepts
20%of the exam
Questions 26–30
- 26
In a DMVPN network, which component is responsible for registering spoke routers and facilitating the establishment of direct spoke-to-spoke tunnels?
Select an answer first - 27
In standards-based IPsec, which protocol provides authentication and integrity but does NOT encrypt the IP packet?
Select an answer first - 28
Which statement best describes the flexibility of FlexVPN?
Select an answer first - 29
A company is deploying a remote access VPN for employees. The security team requires strong authentication using certificates and wants to support multiple authentication methods. The VPN must also support both remote access and site-to-site connections with the same protocol. Which protocol should be used?
Select an answer first - 30
A company has a DMVPN network with a hub in a data center and 300 spokes. The spokes have dynamic public IP addresses. The network team wants to ensure that spoke-to-spoke tunnels are established only when there is traffic, to conserve resources. Which DMVPN feature should be configured?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to 350-701
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.