nerdexam
Cisco

300-320 · Question #87

Which two VPN solutions extend the routing capabilities of basic IPsec VPNs? (Choose two.)

The correct answer is A. GRE D. VTI. Basic IPsec VPNs encrypt traffic between endpoints but do not natively support dynamic routing protocols because they lack a routable interface. GRE (Generic Routing Encapsulation) creates a logical tunnel interface over which routing protocols like OSPF or EIGRP can run, and…

Advanced WAN Services

Question

Which two VPN solutions extend the routing capabilities of basic IPsec VPNs? (Choose two.)

Options

  • AGRE
  • BNVI
  • CDES
  • DVTI
  • EAES

How the community answered

(24 responses)
  • A
    92% (22)
  • C
    4% (1)
  • E
    4% (1)

Explanation

Basic IPsec VPNs encrypt traffic between endpoints but do not natively support dynamic routing protocols because they lack a routable interface. GRE (Generic Routing Encapsulation) creates a logical tunnel interface over which routing protocols like OSPF or EIGRP can run, and is commonly combined with IPsec for security. VTI (Virtual Tunnel Interface) provides a routable, point-to-point interface for IPsec, enabling dynamic routing without the overhead of GRE. DES and AES are encryption algorithms, not VPN architectures, and NVI (NAT Virtual Interface) is related to NAT, not routing extension.

Topics

#IPsec VPN#GRE#VTI#routing over VPN

Community Discussion

No community discussion yet for this question.

Full 300-320 Practice