nerdexam
Cisco

300-730 · Question #120

A user is experiencing delays on audio calls over a Cisco AnyConnect VPN. Which implementation step resolves this issue?

The correct answer is D. Enable DTLS.. Audio call delays over AnyConnect VPN are caused by TCP-based TLS overhead; enabling DTLS allows voice traffic to use UDP transport, eliminating retransmission-induced latency.

Remote Access VPN

Question

A user is experiencing delays on audio calls over a Cisco AnyConnect VPN. Which implementation step resolves this issue?

Options

  • AChange to 3DES Encryption.
  • BShorten the encryption key lifetime.
  • CInstall the Cisco AnyConnect 2.3 client for the user to download.
  • DEnable DTLS.

How the community answered

(62 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    5% (3)
  • D
    92% (57)

Why each option

Audio call delays over AnyConnect VPN are caused by TCP-based TLS overhead; enabling DTLS allows voice traffic to use UDP transport, eliminating retransmission-induced latency.

AChange to 3DES Encryption.

3DES is a slower, more computationally expensive cipher than AES; switching to it would increase encryption processing time and worsen latency rather than improve it.

BShorten the encryption key lifetime.

A shorter key lifetime triggers more frequent IKE rekeying events, adding periodic overhead to the tunnel rather than reducing audio delay.

CInstall the Cisco AnyConnect 2.3 client for the user to download.

AnyConnect 2.3 is an obsolete client version that predates modern DTLS optimizations and does not address the fundamental TCP-versus-UDP transport issue causing audio delays.

DEnable DTLS.Correct

AnyConnect defaults to TLS over TCP for its tunnel, which introduces head-of-line blocking and retransmission delays that are especially harmful to real-time audio. DTLS (Datagram Transport Layer Security) uses UDP as its transport layer, providing the low-latency, loss-tolerant path that voice and video traffic requires. Enabling DTLS on the ASA headend and AnyConnect profile allows real-time media to bypass TCP overhead entirely.

Concept tested: Enabling DTLS on AnyConnect VPN for real-time traffic

Source: https://www.cisco.com/c/en/us/td/docs/security/asa/asa98/configuration/vpn/asa-98-vpn-config/vpn-anyconnect.html

Topics

#AnyConnect#DTLS#voice quality#latency

Community Discussion

No community discussion yet for this question.

Full 300-730 Practice