Cisco
300-440 · Question #36
Drag and Drop Question An engineer must edit the settings of a site-to-site IPsec VPN connection between an on- premises Cisco IOS XE router and Amazon Web Services (AWS). IPsec must be configured to
Sign in or unlock 300-440 to reveal the answer and full explanation for question #36. The question stem and answer options stay visible for context.
IPsec Cloud Connectivity
Question
Drag and Drop Question An engineer must edit the settings of a site-to-site IPsec VPN connection between an on- premises Cisco IOS XE router and Amazon Web Services (AWS). IPsec must be configured to support multiple peers and failover after 120 seconds of idle time on the first entry of the crypto map named Cisco. Drag and drop the commands from the left onto the order on the right. Answer:
Exhibit
Answer Area
Drag items
set peer 192.168.10.1 defaultcrypto map cisco 1 ipsec-isakmpset security-association idle-time 10 defaultset peer 192.168.20.1
Unlock 300-440 to see the answer
You've previewed enough free 300-440 questions. Unlock 300-440 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#IPsec#crypto map#multiple peers#failover