CCIE Security
Domain 2Objective 3
2.3 FlexVPN, DMVPN, and IPsec L2L Tunnels CCIE-SECURITY Practice Questions (Page 2)
Part of the 2.0 Secure Connectivity and Segmentation domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 2–3 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)
37questions here
8free pages
10concepts
20%of the exam
Questions 6–10
- 6
Which two protocols are commonly used for key management in IPsec L2L tunnels?
Select an answer first - 7
Which configuration approach is used for a traditional IPsec L2L tunnel with IKEv1?
Select an answer first - 8
In an IKEv2 IPsec L2L configuration using tunnel protection, which component is used to associate the tunnel interface with the IPsec profile?
Select an answer first - 9
Which command shows the status of IPsec security associations, including the number of encrypted/decrypted packets?
Select an answer first - 10
If an IPsec L2L tunnel is not coming up, which command would you use to check the IKE phase 1 status?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.