300-730 Question #1: Real Exam Question with Answer & Explanation

The correct answer is A: GETVPN. GET VPN uses Time-Based Anti-Replay (TBAR) instead of sequence-number-based anti-replay because it preserves the original IP header and operates in a tunnel-less architecture.

Question

Which VPN solution uses TBAR?

Options

AGETVPN
BVTI
CDMVPN
DCisco AnyConnect

Explanation

GET VPN uses Time-Based Anti-Replay (TBAR) instead of sequence-number-based anti-replay because it preserves the original IP header and operates in a tunnel-less architecture.

Common mistakes.

B. VTI (Virtual Tunnel Interface) uses standard IPsec with sequence-number-based anti-replay, not TBAR.
C. DMVPN uses IPsec for encryption with standard sequence-based anti-replay, and does not employ TBAR.
D. Cisco AnyConnect uses SSL/TLS or DTLS for transport and does not use TBAR as an anti-replay mechanism.

Concept tested. GET VPN Time-Based Anti-Replay (TBAR)

Reference. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_getvpn/configuration/xe-3s/sec-get-vpn-xe-3s-book/sec-get-vpn.html

Community Discussion

No community discussion yet for this question.

Full 300-730 Practice