What is the primary purpose of Cisco ASA VPN clustering?

To increase the number of physical interfaces on a single ASA

To provide high availability and load balancing for VPN connections

To simplify the configuration of access-control lists

To replace the need for a firewall in the network

In a dual-hub DMVPN topology, how do spokes typically connect to the hubs?

Each spoke has a single tunnel to one hub only

Each spoke establishes a tunnel to both hubs

Spokes use a single tunnel that is shared between hubs

Spokes connect only to the hub with the highest IP address

What is the role of NHRP in a dual-hub DMVPN configuration?

To encrypt traffic between spokes

To provide backup for the routing protocol

To map tunnel IP addresses to physical (NBMA) addresses

In a dual-hub DMVPN, how can routing be configured to use both hubs for load balancing?

By using static routes to each hub

By configuring equal-cost routes via both hubs

By using two separate routing processes, one for each hub

When a hub fails in a dual-hub DMVPN, how do spokes continue to communicate?

They automatically switch to the other hub using the pre-established tunnel

They establish a new tunnel to the failed hub's IP address

They use spoke-to-spoke tunnels exclusively

They must be manually reconfigured to use the backup hub

CCIE Security

Domain 2Objective 4

2.4 VPN High Availability Methods CCIE-SECURITY Practice Questions (Page 1)

Part of the 2.0 Secure Connectivity and Segmentation domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 2–3 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

7concepts

20%of the exam

Questions 1–5

1foundation · easy
What is the primary purpose of Cisco ASA VPN clustering?
Select an answer first
2foundation · easy
In a dual-hub DMVPN topology, how do spokes typically connect to the hubs?
Select an answer first
3foundation · easy
What is the role of NHRP in a dual-hub DMVPN configuration?
Select an answer first
4foundation · easy
In a dual-hub DMVPN, how can routing be configured to use both hubs for load balancing?
Select an answer first
5foundation · easy
When a hub fails in a dual-hub DMVPN, how do spokes continue to communicate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.