Hub-And-Spoke VPNs JN0-637 Practice Questions (Page 1)

Questions 1–5

1. 1application · hard

   A company has a hub-and-spoke VPN with two hubs. Spoke A is configured with IPsec tunnels to both hubs. The primary hub fails, and the spoke's routing protocol detects the failure and starts using the secondary hub. However, traffic from spoke A to spoke B is not working. What is the most likely cause?

   • AThe secondary hub does not have a route to spoke B.
   • BThe IKE SA on the secondary hub has expired.
   • CThe security policy on spoke A does not permit traffic to spoke B.
   • DThe IPsec tunnel between spoke A and the secondary hub is not up.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is a common method to provide redundancy in a hub-and-spoke VPN when a primary hub fails?

   • AConfigure a backup hub and have spokes establish tunnels to both hubs simultaneously
   • BIncrease the IKE rekey interval on the spokes
   • CEnable IPsec dead peer detection (DPD) on the hub only
   • DConfigure the spokes to use a dynamic routing protocol to find an alternate path
   Reveal Solution Discussion Select an answer first
4. 3application · hard

   A network engineer is configuring a hub-and-spoke VPN with OSPF as the routing protocol. The hub and spokes are in the same OSPF area. The engineer wants to ensure that spoke-to-spoke traffic is forwarded through the hub, not directly between spokes. What configuration should be applied?

   • AConfigure OSPF to advertise only the hub's loopback address to the spokes.
   • BUse OSPF with a higher cost on the hub's tunnel interfaces to discourage direct spoke-to-spoke traffic.
   • CConfigure OSPF on the hub and spokes with the same area ID and let OSPF form adjacencies over the tunnels.
   • DConfigure OSPF only between the hub and each spoke, and set the hub as the designated router (DR) for each segment.
   Reveal Solution Discussion Select an answer first
5. 4application · hard

   A company is deploying a hub-and-spoke VPN with two hubs for redundancy. They are using BGP to exchange routes between the hubs and spokes. The spokes are configured with BGP sessions to both hubs. The network team wants to ensure that the primary hub is preferred for all outbound traffic from the spokes. What BGP attribute should be manipulated on the primary hub?

   • AAS path length
   • BMED (Multi-Exit Discriminator)
   • CLocal preference
   • DNext-hop
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   When using BGP in a hub-and-spoke VPN, what is the primary purpose of configuring the hub as a route reflector?

   • ATo reduce the number of BGP sessions required, as spokes only peer with the hub instead of with each other
   • BTo encrypt the BGP routing updates between the hub and spokes
   • CTo increase the speed of BGP route convergence
   • DTo filter out private IP addresses from the routing table
   Reveal Solution Discussion Select an answer first