Which statement is the most accurate regarding IPsec VPN design for an Enterprise Campus environment?

Question

Options

• AVPN device IP addressing must align with the existing Campus addressing scheme.
• BThe choice of a hub-and-spoke or meshed topology ultimately depends on the number of
• CSizing and selection of the IPsec VPN headend devices is most affected by the throughput
• DScaling considerations such as headend configuration, routing protocol choice, and topology have

• A
  7% (4)
• B
  12% (7)
• C
  20% (12)
• D
  62% (37)

Explanation

Answer D is correct because scaling considerations - including headend configuration complexity, the routing protocol selected (e.g., EIGRP, OSPF, BGP over tunnels), and whether a hub-and-spoke or full-mesh topology is used - collectively have the greatest impact on an enterprise IPsec VPN design. These interdependent factors must all be evaluated together. Option A is incorrect because VPN addressing does not have to mirror the campus scheme. Option B is wrong because topology choice depends on traffic patterns and scalability requirements, not just site count. Option C is partially true - throughput matters - but it is not the single most impactful sizing factor; tunnel count, IKE overhead, and high availability requirements are equally or more important.

No community discussion yet for this question.