nerdexam
Cisco

350-701 · Question #361

What is the function of the crypto isakmp key cisc123456789 address 192.168.50.1 255.255.255.255 command when establishing an IPsec VPN tunnel?

The correct answer is B. It configures the pre-shared authentication key for host 192.168.50.1.. This command configures the pre-shared key (PSK) for IKE (ISAKMP) phase 1 authentication with a specific remote peer.

Submitted by paula_co· Mar 30, 2026Network Security

Question

What is the function of the crypto isakmp key cisc123456789 address 192.168.50.1 255.255.255.255 command when establishing an IPsec VPN tunnel?

Options

  • AIt defines the data destined to 192.168.50.1 is going to be encrypted.
  • BIt configures the pre-shared authentication key for host 192.168.50.1.
  • CIt prevents 192.168.50.1 from connecting to the VPN server.
  • DIt configures the local address for the VPN server 192.168.50.1.

How the community answered

(50 responses)
  • A
    6% (3)
  • B
    84% (42)
  • C
    8% (4)
  • D
    2% (1)

Why each option

This command configures the pre-shared key (PSK) for IKE (ISAKMP) phase 1 authentication with a specific remote peer.

AIt defines the data destined to 192.168.50.1 is going to be encrypted.

Defining data to be encrypted is typically handled by access lists referenced in crypto maps, not by the `crypto isakmp key` command.

BIt configures the pre-shared authentication key for host 192.168.50.1.Correct

The `crypto isakmp key` command is used to define the pre-shared key that will be used for authentication during the IKE (Internet Key Exchange) phase 1 negotiation of an IPsec VPN tunnel. The `address 192.168.50.1 255.255.255.255` part specifies that this particular key (`cisc123456789`) is to be used when establishing a connection with the remote peer at IP address 192.168.50.1. Both VPN endpoints must have the same pre-shared key configured for successful authentication.

CIt prevents 192.168.50.1 from connecting to the VPN server.

This command facilitates VPN connection setup by defining an authentication key, it does not prevent connections.

DIt configures the local address for the VPN server 192.168.50.1.

This command defines a key for a *remote* peer for authentication, not the *local* address of the VPN server.

Concept tested: IPsec VPN IKE Phase 1 PSK configuration

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/a1/sec-a1-cr-book/sec-a1-cr-c2.html#wp4167527633

Topics

#IPsec VPN#ISAKMP#pre-shared key#IOS VPN configuration

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 350-701 Practice