nerdexam
Cisco

350-701 · Question #138

What is a difference between FlexVPN and DMVPN?

The correct answer is D. FlexVPN uses IKEv2. DMVPN uses IKEv1 or IKEv2.. A key difference is that FlexVPN exclusively uses IKEv2 for negotiations, whereas DMVPN supports both IKEv1 and IKEv2.

Submitted by rachelw· Mar 30, 2026Network Security

Question

What is a difference between FlexVPN and DMVPN?

Options

  • AFlexVPN uses IKEv1 or IKEv2. DMVPN uses only IKEv2
  • BDMVPN uses only IKEv1 FlexVPN uses only IKEv2.
  • CDMVPN uses IKEv1 or IKEv2. FlexVPN only uses IKEv1
  • DFlexVPN uses IKEv2. DMVPN uses IKEv1 or IKEv2.

How the community answered

(43 responses)
  • A
    2% (1)
  • C
    5% (2)
  • D
    93% (40)

Why each option

A key difference is that FlexVPN exclusively uses IKEv2 for negotiations, whereas DMVPN supports both IKEv1 and IKEv2.

AFlexVPN uses IKEv1 or IKEv2. DMVPN uses only IKEv2

This is incorrect because DMVPN supports both IKEv1 and IKEv2, not only IKEv2.

BDMVPN uses only IKEv1 FlexVPN uses only IKEv2.

This is incorrect because DMVPN supports both IKEv1 and IKEv2, and FlexVPN uses only IKEv2, not only IKEv1.

CDMVPN uses IKEv1 or IKEv2. FlexVPN only uses IKEv1

This is incorrect because FlexVPN uses only IKEv2, not only IKEv1.

DFlexVPN uses IKEv2. DMVPN uses IKEv1 or IKEv2.Correct

FlexVPN is a Cisco-proprietary framework built specifically on IKEv2 (Internet Key Exchange version 2) for its negotiations, simplifying its configuration and leveraging IKEv2's enhanced features. In contrast, DMVPN (Dynamic Multipoint VPN) has historically supported IKEv1 and can also be configured to use IKEv2, offering more flexibility in its IKE version support.

Concept tested: FlexVPN vs. DMVPN IKE version support

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_flexvpn/configuration/xe-3s/sec-flex-vpn-xe-3s-book/flex-vpn-cfg.html

Topics

#FlexVPN#DMVPN#IKEv1#IKEv2

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice