Describe site-to-site and remote access VPN deployment types such as virtual tunnel interfaces, standards-based IPsec, SSL VPN, DMVPN, FlexVPN, and GETVPN
8 practice questions under this official exam objective (350-701), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
8 total · page 1 of 1Cisco IOS crypto isakmp key command subnet mask behavior
The 'crypto isakmp key' command configures a pre-shared secret for IKEv1 authentication. When no subnet mask is explicitly specified, Cisco IOS defaul
L2TP vs GRE over IPsec for Site-to-Site VPN
This question examines the fundamental differences between L2TP and GRE tunneling protocols when used with IPsec, focusing on their operational indepe
IPsec ESP Protocol with ACK and Sequence Numbers
This question tests knowledge of IPsec protocol components, specifically Encapsulating Security Payload (ESP), which provides both encryption and reli
Why Does a Cisco IPsec VPN Tunnel Show Proxy Identities Not Supported?
This Cisco IPsec troubleshooting question examines a failed IKEv1 tunnel whose debug shows 'proxy identities not supported' and establishes that the i
Site-to-Site VPN Phase 1 Up Phase 2 Down Troubleshooting
When a site-to-site VPN tunnel has Phase 1 established but fails to pass traffic, the issue typically lies in Phase 2 negotiation parameters. This ana
DMVPN vs IPsec VPN: High Availability and Failover
This question explores the architectural differences between DMVPN and standard IPsec VPNs, specifically focusing on their capabilities regarding rout
How to Reduce VPN Bandwidth Load on a Cisco ASA Headend?
Split tunneling lets a remote-access VPN client send only traffic destined for the 10.0.0.0/24 corporate network through the ASA tunnel while other tr
Configuring ISAKMP Key for Specific Peer IP on Cisco IOS
This question tests the specific syntax for assigning an ISAKMP pre-shared key to a remote peer in Cisco IOS XE. It establishes that the correct comma