400-007: Cisco Certified Design ExpertDemo

By Cisco · Question Mode

QuestionQ235

Network Design

Company XYZ operates 30 sites using a legacy private WAN architecture that connects to the Internet through multiple high-speed connections. The company is redesigning its network and must meet these design requirements:

  • Use a private WAN strategy that enables sites to connect directly to one another and supports future growth.
  • Use the Internet as the underlay for the private WAN.
  • Securely transport corporate data across the private WAN.

Which two technologies should be included in this network design?

Choose two
  • A PPTP
  • B DMVPN
  • C IPsec
  • D GET VPN
  • E S-VTI
Explanation

DMVPN creates a scalable VPN overlay across Internet transport and can dynamically establish direct spoke-to-spoke tunnels, avoiding a statically configured full mesh as sites are added. IPsec supplies the cryptographic protection for corporate traffic over that untrusted underlay. Cisco documents that DMVPN combines GRE, NHRP, and IPsec, and supports dynamically created direct IPsec tunnels between spokes.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!