Cisco 300-730 Exam - Topic 13 Question 109 Discussion

Actual exam question for Cisco's 300-730 exam

Question #: 109
Topic #: 13

[All 300-730 Questions]

What is a characteristic of GETVPN?

AAn ACL that defines interesting traffic must be configured and applied to the crypto map.

BQuick mode is used to create an IPsec SA.

CThe remote peer for the IPsec session is configured as part of the crypto map.

DAll peers have one IPsec SPI for inbound and outbound communication.

Show Suggested Answer

Suggested Answer: D

In GETVPN, all group members share a common security association (SA) database and the same keys for encryption and decryption. This approach avoids the need for per-peer IPsec SAs and simplifies the configuration and management of the VPN. Instead of using multiple SAs, GETVPN uses a single SA with a unique Group Domain of Interpretation (GDOI) group key that is distributed to all group members.

by Ashton at Apr 29, 2025, 09:23 PM

Limited Time Offer

25%

Off

Get Premium 300-730 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Yvonne

3 months ago

Quick mode is definitely not part of GETVPN.

upvoted 0 times

...

Sharee

3 months ago

Wait, are you sure about that? Sounds off.

upvoted 0 times

...

Jenelle

4 months ago

Yeah, the ACL part is important too!

upvoted 0 times

...

Eleonora

4 months ago

Totally agree, that's a key feature!

upvoted 0 times

...

Jeannine

4 months ago

GETVPN uses a single IPsec SPI for all peers.

upvoted 0 times

...

Dyan

4 months ago

I vaguely remember something about SPIs in GETVPN, but I’m not confident if all peers share one for communication.

upvoted 0 times

...

Annice

5 months ago

I feel like the crypto map concept is more for traditional IPsec setups, so I’m uncertain about the remote peer configuration in GETVPN.

upvoted 0 times

...

Omer

5 months ago

I think I saw a question about IPsec SAs in practice tests, but I can't recall if quick mode is relevant for GETVPN specifically.

upvoted 0 times

...

Raina

5 months ago

I remember studying GETVPN, but I’m not sure if it requires an ACL for interesting traffic like traditional VPNs do.

upvoted 0 times

...

Otis

5 months ago

Okay, GETVPN, I'm a little fuzzy on the details here. I'll try to eliminate the options that don't sound right and see if I can narrow it down.

upvoted 0 times

...

Barb

5 months ago

Ah, GETVPN, I remember learning about that in class. I'm going to read through the choices and see if I can recall the right answer.

upvoted 0 times

...

Denae

5 months ago

Hmm, this GETVPN question looks tricky. I'll have to carefully consider each option and try to remember the key characteristics.

upvoted 0 times

...

Peggie

6 months ago

I'm pretty familiar with GETVPN, so I think I can handle this one. Let me think it through.

upvoted 0 times

...

Ashlyn

10 months ago

But doesn't Quick mode being used to create an IPsec SA also a characteristic of GETVPN?

upvoted 0 times

...

Jame

10 months ago

I disagree, I believe it is the ACL that defines interesting traffic must be configured and applied to the crypto map.

upvoted 0 times

...

Murray

10 months ago

Wait, is this a trick question? I thought GETVPN was all about group encryption, not ACLs and crypto maps!

upvoted 0 times

Theron

9 months ago

D) All peers have one IPsec SPI for inbound and outbound communication.

upvoted 0 times

...

Timothy

9 months ago

C) The remote peer for the IPsec session is configured as part of the crypto map.

upvoted 0 times

...

Jina

9 months ago

B) Quick mode is used to create an IPsec SA.

upvoted 0 times

...

Chauncey

9 months ago

A) An ACL that defines interesting traffic must be configured and applied to the crypto map.

upvoted 0 times

...

Ashlyn

11 months ago

I think the characteristic of GETVPN is that all peers have one IPsec SPI for inbound and outbound communication.

upvoted 0 times

...

Mitsue

11 months ago

C is a tempting choice, but I'm pretty sure GETVPN doesn't use crypto maps like traditional IPsec.

upvoted 0 times

Nilsa

9 months ago

C) The remote peer for the IPsec session is configured as part of the crypto map.

upvoted 0 times

...

Jenise

9 months ago

B) Quick mode is used to create an IPsec SA.

upvoted 0 times

...

Raylene

9 months ago

A) An ACL that defines interesting traffic must be configured and applied to the crypto map.

upvoted 0 times

...

Jutta

11 months ago

Hah, D is just plain wrong. GETVPN uses a group security association, not individual IPsec SAs.

upvoted 0 times

Tyra

9 months ago

C) The remote peer for the IPsec session is configured as part of the crypto map.

upvoted 0 times

...

Shala

10 months ago

B) Quick mode is used to create an IPsec SA.

upvoted 0 times

...

Jonell

10 months ago

A) An ACL that defines interesting traffic must be configured and applied to the crypto map.

upvoted 0 times

...

Josue

11 months ago

B seems like the right answer to me. GETVPN uses IKE quick mode, not main mode.

upvoted 0 times

...

Donette

11 months ago

I think the correct answer is A. The ACL is a key part of GETVPN to define the interesting traffic.

upvoted 0 times

Angella

10 months ago

I'm not sure, but I think the remote peer is configured in the crypto map.

upvoted 0 times

...

Kirk

10 months ago

I think it's actually D, all peers sharing one SPI.

upvoted 0 times

...

Jennifer

10 months ago

I agree, the ACL is crucial in GETVPN.

upvoted 0 times

...