300-730 · Question #137
What are two advantages of using GETVPN to traverse over the network between corporate offices? (Choose two.)
The correct answer is B. It supports multicast. D. It is a highly scalable any to any mesh topology. GETVPN's primary advantages for corporate WAN connectivity are native multicast support and a scalable any-to-any mesh topology without point-to-point tunnels.
Question
Options
- AIt has unique session keys for improved security.
- BIt supports multicast.
- CIt has QoS support.
- DIt is a highly scalable any to any mesh topology.
- EIt supports a hub-and-spoke topology.
How the community answered
(49 responses)- A2% (1)
- B94% (46)
- C4% (2)
Why each option
GETVPN's primary advantages for corporate WAN connectivity are native multicast support and a scalable any-to-any mesh topology without point-to-point tunnels.
GETVPN uses a shared group key delivered to all registered members by the key server rather than unique per-session keys; the group key model is the defining characteristic of GETVPN and means encryption keys are common across the group, not unique per communicating pair.
GETVPN is a tunnel-less VPN that retains the original IP header of encrypted packets, allowing multicast traffic to flow naturally across the network without requiring multicast-over-unicast workarounds that are necessary in encapsulating tunnel-based solutions like DMVPN.
While GETVPN preserves original IP headers and thus retains DSCP markings that support QoS, this is a byproduct of its tunnel-less design rather than a primary differentiating advantage specific to GETVPN.
Because GETVPN uses a shared group key distributed by the key server and preserves original source and destination addressing, all group members can communicate directly with each other in a full any-to-any mesh without configuring individual point-to-point tunnels, making it highly scalable for large enterprise WAN deployments.
GETVPN is architected for any-to-any full-mesh communication across a private WAN; hub-and-spoke topology is characteristic of traditional site-to-site or remote access VPN designs, not GETVPN.
Concept tested: GETVPN multicast support and any-to-any mesh topology
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_getvpn/configuration/xe-16/sec-get-vpn-xe-16-book/sec-get-vpn.html
Topics
Community Discussion
No community discussion yet for this question.