An organization is working on a design solution for a new Internet-based remote access virtual private network that has 1000 remote sites. A network administrator recommends GETVPN as the model.
What is a potential problem of using GETVPN in this situation?

• A.GETVPN requires a high level of background traffic to maintain its IPsec SAs.
• B.GETVPN and DMVPN do not interoperate.
• C.GETVPN is not scalable to a large number of remote sites.
• D.GETVPN key servers would be on public, hacker-reachable space and need higher security.

Comment: *

Name: *

Email: *

Verification: *

A business requirement is supplied to an architect from a car manufacturer stating their business model is changing to just-in-time manufacturing and a new network is required. The manufacturer does not produce all of the specific components in-house. Which area should the architect focus on initially?

• A.Automation
• B.Zero Trust Networking
• C.Low Latency Infrastructure
• D.Modularity

Comment: *

Name: *

Email: *

Verification: *

When constraint-based routing is under consideration to be added to a network design, what are two inherent characteristics or impacts that must be considered? (Choose two)

• A.stability in the route table
• B.less resources than the shortest path
• C.better network utilization
• D.smaller routing table size
• E.high computation overhead

Comment: *

Name: *

Email: *

Verification: *

Company XYZ has multiple production units and marketing departments across the region. The current network is a mixture of point-to-point links and MPLS Layer 3 VPN service from the provider. The Info-Sec team has suggested to isolate production traffic end-to-end with an encryption over the transport network to comply with the HIPAA standard. Which solution must be used in their design if Company XYZ wants a quick roll out?

• A.VRF-Lite can be implemented toward the downstream network and VRF-based tunnels combined with IPsec can be implemented over the service provider
• B.GETVPN can be implemented over the MPLS provider, which provides a payload encryption without the overhead of the tunnelling
• C.A firewall can be placed centrally to filter out the traffic based on required ports.
• D.IPsec point-to-point tunnels over the MPLS and point-to-point links provide an isolated and encrypted packet end-to-end

Comment: *

Name: *

Email: *

Verification: *

Which solution component helps to achieve rapid migration to the cloud for SaaS and public cloud leveraging SD-WAN capabilities?

• A.Service-oriented cloud architecture
• B.Cloud OnRamp
• C.Cloud registry
• D.Microservices in the cloud

Comment: *

Name: *

Email: *

Verification: *