A company's remote locations connect to the data centers via MPLS. A new request requires that unicast and multicast traffic that exits in the remote locations be encrypted. Which technology will…

FlexVPN establishes individual IKEv2-based point-to-point or hub-and-spoke tunnels with per-peer Security Associations, not a shared Group SA across all sites.

DMVPN creates per-spoke tunnel Security Associations using NHRP and mGRE, which does not produce a shared SA and adds multicast replication complexity rather than eliminating it.

GETVPN (Group Encrypted Transport VPN) is built around the concept of a Group Security Association (Group SA) managed by a Key Server and distributed to all Group Members. This shared SA allows any group member to encrypt and decrypt traffic using the same keys, supporting both unicast and multicast without altering the existing MPLS routing topology or requiring tunnel interfaces.

SSL VPN operates at the application layer using TLS and does not provide a Shared Security Association or native transport-layer multicast encryption over MPLS.