nerdexam
Cisco

300-730 · Question #89

Which VPN technology must be used to ensure that routers are able to dynamically form connections with each other rather than sending traffic through a hub and be able to advertise routes without…

The correct answer is D. GETVPN. GETVPN enables any-to-any encrypted communication without a hub by leveraging the existing MPLS routing infrastructure, eliminating the need for a dynamic routing protocol overlay.

Site-to-site Virtual Private Networks on Routers and Firewalls

Question

Which VPN technology must be used to ensure that routers are able to dynamically form connections with each other rather than sending traffic through a hub and be able to advertise routes without the use of a dynamic routing protocol?

Options

  • AFlexVPN
  • BDMVPN Phase 3
  • CDMVPN Phase 2
  • DGETVPN

How the community answered

(14 responses)
  • B
    7% (1)
  • C
    7% (1)
  • D
    86% (12)

Why each option

GETVPN enables any-to-any encrypted communication without a hub by leveraging the existing MPLS routing infrastructure, eliminating the need for a dynamic routing protocol overlay.

AFlexVPN

FlexVPN supports dynamic VPN topologies but still requires a dynamic routing protocol such as BGP or EIGRP to advertise routes between peers.

BDMVPN Phase 3

DMVPN Phase 3 uses NHRP shortcut switching to enable spoke-to-spoke tunnels but still requires a dynamic routing protocol for route advertisement between spokes.

CDMVPN Phase 2

DMVPN Phase 2 allows direct spoke-to-spoke tunnels but spokes must receive routing information via a hub running a dynamic routing protocol, failing the no-routing-protocol requirement.

DGETVPNCorrect

GETVPN operates as a non-tunneled, group-based VPN where all group members share encryption keys provisioned by a Key Server, allowing direct encrypted communication between any two sites without traversing a hub. Because GETVPN preserves the original IP header and relies on the underlying MPLS network for routing, no additional dynamic routing protocol is required on the VPN overlay. This makes GETVPN the only option that satisfies both the any-to-any direct connectivity and the no-routing-protocol requirements simultaneously.

Concept tested: GETVPN any-to-any VPN without dynamic routing protocol

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_getvpn/configuration/xe-16/sec-get-vpn-xe-16-book.html

Topics

#GETVPN#DMVPN#spoke-to-spoke#VPN architecture

Community Discussion

No community discussion yet for this question.

Full 300-730 Practice