How does NHRP help optimize traffic paths in a dual-hub DMVPN?

By allowing spokes to learn the public IP of other spokes and create direct tunnels

By load balancing traffic between the two hubs

By providing encryption for spoke-to-spoke traffic

By forcing all traffic to go through the hubs

Which architecture best describes an ASA VPN cluster?

A virtual ASA running on a hypervisor

Multiple independent ASAs with no coordination

A primary ASA with a standby that only activates on failure

A group of ASAs that appears as a single logical device

In the spanned EtherChannel deployment model for ASA clustering, how is traffic forwarded?

All cluster members share a common EtherChannel to the switch

Traffic is sent only to the master unit

Each member has a dedicated VLAN for its traffic

Each ASA uses its own separate uplinks and does not share traffic

What is the purpose of the control link in an ASA cluster?

To carry user data traffic between cluster members

To provide a backup path for VPN traffic

To connect the cluster to the internet

To exchange cluster management and state information between members

CCIE Security

Domain 2Objective 4

2.4 VPN High Availability Methods CCIE-SECURITY Practice Questions (Page 2)

Part of the 2.0 Secure Connectivity and Segmentation domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 2–3 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

7concepts

20%of the exam

Questions 6–10

6foundation · easy
How does NHRP help optimize traffic paths in a dual-hub DMVPN?
Select an answer first
7foundation · easy
Which architecture best describes an ASA VPN cluster?
Select an answer first
8foundation · easy
In the spanned EtherChannel deployment model for ASA clustering, how is traffic forwarded?
Select an answer first
9foundation · easy
Which deployment model for ASA clustering uses individual interfaces on each member, requiring the switch to route traffic to the appropriate member?
Select an answer first
10foundation · easy
What is the purpose of the control link in an ASA cluster?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.