nerdexam
CiscoCisco

350-701 · Question #438

350-701 Question #438: Real Exam Question with Answer & Explanation

The correct answer is D: DMVPN can be used over the public Internet, and GETVPN requires a private network.. DMVPN is designed for secure communication over untrusted public networks like the internet, whereas GETVPN is intended for private IP networks or MPLS VPNs where the underlying network is considered trusted.

Submitted by yuki_2020· Mar 30, 2026DOMAIN_LIST_NOT_PROVIDED

Question

Which benefit does DMVPN provide over GETVPN?

Options

  • ADMVPN supports QoS, multicast, and routing, and GETVPN supports only QoS.
  • BDMVPN is a tunnel-less VPN, and GETVPN is tunnel-based.
  • CDMVPN supports non-IP protocols, and GETVPN supports only IP protocols.
  • DDMVPN can be used over the public Internet, and GETVPN requires a private network.

Explanation

DMVPN is designed for secure communication over untrusted public networks like the internet, whereas GETVPN is intended for private IP networks or MPLS VPNs where the underlying network is considered trusted.

Common mistakes.

  • A. Both DMVPN and GETVPN support QoS, multicast, and routing protocols; this statement is factually incorrect about GETVPN's limitations.
  • B. DMVPN is tunnel-based (mGRE over IPsec), while GETVPN encrypts the original IP packet payload, maintaining the original IP headers, which is sometimes referred to as 'tunnel-less' in comparison to traditional tunnels.
  • C. Both DMVPN and GETVPN are IP-based VPN technologies and primarily support IP protocols within their encrypted sessions.

Concept tested. DMVPN vs. GETVPN use cases

Reference. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dmvpn/configuration/xe-3s/sec-conn-dmvpn-xe-3s-book/sec-conn-dmvpn-overview.html

Topics

#DMVPN#GETVPN#VPN types#VPN comparison

Community Discussion

No community discussion yet for this question.

Full 350-701 PracticeBrowse All 350-701 Questions