Which two conditions are prerequisites for stateful failover for IPsec? (Choose two.)

The correct answer is C. The IPsec configuration that is set up on the active device must be duplicated on the standby E. The active and standby devices must run the same version of the Cisco IOS software and must. Restrictions for Stateful Failover for IPsec When configuring redundancy for a VPN, the following restrictions apply: Both the active and standby devices must run the identical version of the Cisco IOS software, and both the active and standby devices must be connected via a hub

Submitted by fatema_kw· Mar 30, 2026

Question

Options

AOnly the IKE configuration that is set up on the active device must be duplicated on the standby
BThe active and standby devices can run different versions of the Cisco IOS software but must be
CThe IPsec configuration that is set up on the active device must be duplicated on the standby
DOnly the IPsec configuration that is set up on the active device must be duplicated on the standby
EThe active and standby devices must run the same version of the Cisco IOS software and must

How the community answered

(33 responses)

A
3% (1)
C
91% (30)
D
6% (2)

Explanation

Restrictions for Stateful Failover for IPsec When configuring redundancy for a VPN, the following restrictions apply: Both the active and standby devices must run the identical version of the Cisco IOS software, and both the active and standby devices must be connected via a hub or switch. availability-15-mt-book/sec-state-fail-ipsec.html

Topics

#IPsec Stateful Failover#High Availability#Cisco IOS#Configuration Synchronization

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice