Which two are characteristics of GETVPN? (Choose two.)

GETVPN preserves the original IP header on encrypted packets and distributes the same group keys to all members, enabling any-to-any encryption without tunnels.

Secure Communications

Question

Which two are characteristics of GETVPN? (Choose two.)

Options

AThe IP header of the encrypted packet is preserved
BA key server is elected among all configured Group Members
CUnique encryption keys are computed for each Group Member
DThe same key encryption and traffic encryption keys are distributed to all Group Members

Why each option

GETVPN preserves the original IP header on encrypted packets and distributes the same group keys to all members, enabling any-to-any encryption without tunnels.

AThe IP header of the encrypted packet is preserved

BA key server is elected among all configured Group Members

In GETVPN, the Key Server role is manually configured as primary or secondary/cooperative - it is not dynamically elected among Group Members the way a routing protocol elects a designated router.

CUnique encryption keys are computed for each Group Member

GETVPN uses shared group keys distributed identically to all members, not unique per-member keys - unique per-peer key negotiation is a characteristic of standard IKE-based VPNs such as DMVPN.

DThe same key encryption and traffic encryption keys are distributed to all Group Members

Concept tested: GETVPN shared group key distribution and header preservation

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_getvpn/configuration/xe-16/sec-conn-getvpn-xe-16-book/sec-conn-get-vpn.html

Topics

#GETVPN#IP header preservation#traffic encryption key#group member

Community Discussion

No community discussion yet for this question.

Full 300-730 Practice