Which command on the hub will allow the administrator to accomplish this?

An administrator is establishing a new site-to-site VPN connection on a Cisco IOS router. The organization needs to ensure that the ISAKMP key on the hub is used only for terminating traffic from the IP address of 19.20.24.

Which command on the hub will allow the administrator to accomplish this?
A . crypto ca identity 172.19.20.24
B . crypto isakmp key Cisco0123456789 172.19.20.24
C . crypto enrollment peer address 172.19.20.24
D . crypto isakmp identity address 172.19.20.24

View Answer

Answer: B

Explanation:

Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/a1/sec-a1-cr-book/sec-crc4.html#wp3880782430The command “crypto enrollment peer address” is not valid either. The command “crypto ca identity …” is only used to declare a trusted CA for the router and puts you in the caidentity configuration mode. Also it should be followed by a name, not an IP address. For example: “crypto caidentity CA-Server” -> Answer A is not correct. Only answer B is the best choice left.