300-320 · Question #686
Which two rekeying mechanisms can be used in GETVPN? (Select two.)
The correct answer is B. Multicast rekeying E. Unicast rekeying. GETVPN (Group Encrypted Transport VPN) uses a Key Server (KS) to distribute and refresh encryption keys to all Group Members (GMs). When keys must be refreshed (rekeying), the KS supports two mechanisms: (1) Multicast rekeying-the KS sends a single rekey message to a multicast…
Question
Which two rekeying mechanisms can be used in GETVPN? (Select two.)
Options
- ABroadcast rekeying
- BMulticast rekeying
- CEncrypted rekeying
- DLocal rekeying
- EUnicast rekeying
How the community answered
(20 responses)- A5% (1)
- B90% (18)
- C5% (1)
Explanation
GETVPN (Group Encrypted Transport VPN) uses a Key Server (KS) to distribute and refresh encryption keys to all Group Members (GMs). When keys must be refreshed (rekeying), the KS supports two mechanisms: (1) Multicast rekeying-the KS sends a single rekey message to a multicast group address, which all GMs receive simultaneously. This is efficient for large groups because it does not scale with the number of GMs. (2) Unicast rekeying-the KS sends individual rekey messages to each GM and waits for acknowledgments. This is used when the network does not support multicast or when reliable delivery confirmation is needed. Broadcast, encrypted, and local rekeying are not defined mechanisms within GETVPN.
Topics
Community Discussion
No community discussion yet for this question.