nerdexam
Cisco

300-730 · Question #137

What are two advantages of using GETVPN to traverse over the network between corporate offices? (Choose two.)

The correct answer is B. It supports multicast. D. It is a highly scalable any to any mesh topology. GETVPN's primary advantages for corporate WAN connectivity are native multicast support and a scalable any-to-any mesh topology without point-to-point tunnels.

Secure Communications Architectures

Question

What are two advantages of using GETVPN to traverse over the network between corporate offices? (Choose two.)

Options

  • AIt has unique session keys for improved security.
  • BIt supports multicast.
  • CIt has QoS support.
  • DIt is a highly scalable any to any mesh topology.
  • EIt supports a hub-and-spoke topology.

How the community answered

(49 responses)
  • A
    2% (1)
  • B
    94% (46)
  • C
    4% (2)

Why each option

GETVPN's primary advantages for corporate WAN connectivity are native multicast support and a scalable any-to-any mesh topology without point-to-point tunnels.

AIt has unique session keys for improved security.

GETVPN uses a shared group key delivered to all registered members by the key server rather than unique per-session keys; the group key model is the defining characteristic of GETVPN and means encryption keys are common across the group, not unique per communicating pair.

BIt supports multicast.Correct

GETVPN is a tunnel-less VPN that retains the original IP header of encrypted packets, allowing multicast traffic to flow naturally across the network without requiring multicast-over-unicast workarounds that are necessary in encapsulating tunnel-based solutions like DMVPN.

CIt has QoS support.

While GETVPN preserves original IP headers and thus retains DSCP markings that support QoS, this is a byproduct of its tunnel-less design rather than a primary differentiating advantage specific to GETVPN.

DIt is a highly scalable any to any mesh topology.Correct

Because GETVPN uses a shared group key distributed by the key server and preserves original source and destination addressing, all group members can communicate directly with each other in a full any-to-any mesh without configuring individual point-to-point tunnels, making it highly scalable for large enterprise WAN deployments.

EIt supports a hub-and-spoke topology.

GETVPN is architected for any-to-any full-mesh communication across a private WAN; hub-and-spoke topology is characteristic of traditional site-to-site or remote access VPN designs, not GETVPN.

Concept tested: GETVPN multicast support and any-to-any mesh topology

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_getvpn/configuration/xe-16/sec-get-vpn-xe-16-book/sec-get-vpn.html

Topics

#GETVPN#multicast#any-to-any topology#scalability

Community Discussion

No community discussion yet for this question.

Full 300-730 Practice