nerdexam
Cisco

300-730 · Question #7

Which parameter is initially used to elect the primary key server from a group of key servers?

The correct answer is C. highest-priority value. In GETVPN, the key server with the highest configured priority value wins the primary key server election.

Secure Communications

Question

Which parameter is initially used to elect the primary key server from a group of key servers?

Options

  • Acode version
  • Bhighest IP address
  • Chighest-priority value
  • Dlowest IP address

How the community answered

(32 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    94% (30)

Why each option

In GETVPN, the key server with the highest configured priority value wins the primary key server election.

Acode version

Code version is not a parameter used in the GETVPN key server election process.

Bhighest IP address

Highest IP address is used only as a secondary tiebreaker when two key servers have equal priority values, not as the initial election criterion.

Chighest-priority valueCorrect

Cisco GETVPN uses a priority-based election mechanism to select the primary key server from a cooperative key server group. The key server with the numerically highest priority value is elected as primary and is responsible for generating and distributing the TEK and KEK to group members. If priorities are equal, the highest IP address acts as a tiebreaker.

Dlowest IP address

Lowest IP address is not part of the GETVPN key server election algorithm.

Concept tested: GETVPN key server primary election criteria

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_getvpn/configuration/xe-16/sec-get-vpn-xe-16-book/sec-get-vpn.html

Topics

#GETVPN#key server election#priority#group member

Community Discussion

No community discussion yet for this question.

Full 300-730 Practice