Which two statements are correct?

Refer to the exhibit. Given the partial configuration shown, which two statements are correct? (Choose two.)
crypto ipsec transform-set MY_TRANSFORM esp-aes 128 esp-sha-hmac
!
crypto ipsec profile MYPROFILE
set transform-set MY_TRANSFORM
!
interface Tunne10
ip unnumbered GigabitEthernet1/1
tunnel source GigabitEthernet1/1
tunnel destination 192.168.2.200
tunnel mode ipsec ipv4
tunnel protection ipsec profile MYPROFILE
!
ip route 10.1.2.0 255.255.255.0 Tunne10
A. The tunnel will use the routing protocol configured for GigabitEthemet 1/1 for all tunnel communication with the peer.
B. The IP route statement to reach the remote network behind the DMVPN peer is incorrect, it should be ip route 192.168.2.0 255.255.255.0 tunnel 0.
C. This is an example of a static point-to-point VTI tunnel.
D. The tunnel will use esp-sha-hmac encryption in ESP tunnel mode.
E. The tunnel will use 128-bit AES encryption in ESP tunnel mode.

cisco-exams

Leave a Reply

Your email address will not be published. Required fields are marked *


The reCAPTCHA verification period has expired. Please reload the page.