Refer to the exhibit.
A network security engineer is troubleshooting intermittent connectivity issues across a tunnel. Based on the output from the show crypto ipsec sa command, which cause is most likely?
A. Return traffic is not coming back from the other end of the tunnel.
B. Traffic may flow in only one direction across this tunnel.
C. ISAKMP and/or IPsec may be bouncing up and down
D. The security association lifetimes are set to default values.
C is the correct one because the lifetimes values are closet to the configured one
c is the answer
https://www.cisco.com/c/en/us/support/docs/security/dynamic-multipoint-vpn-dmvpn/111976-dmvpn-troubleshoot-00.html
have to be C
Why C and not D?
Yes but why is that the cause of the problem?
D is correct
Default in lab:
sh crypto ipsec security-association lifetime
Security association lifetime: 4608000 kilobytes/3600 seconds
C is the correct Answer