Which two conditions are prerequisites for stateful failover for IPsec? (Choose two.)

Which two conditions are prerequisites for stateful failover for IPsec? (Choose two.)
A . Only the IKE configuration that is set up on the active device must be duplicated on the standby device; the IPsec configuration is copied automatically.
B . The active and standby devices can run different versions of the Cisco IOS software but must be the same type of device.
C . The IPsec configuration that is set up on the active device must be duplicated on the standby device.
D . Only the IPsec configuration that is set up on the active device must be duplicated on the standby device; the IKE configuration is copied automatically.
E . The active and standby devices must run the same version of the Cisco IOS software and must be the same type of device.

Answer: BC

Explanation:

Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_vpnav/configuration/15-mt/secvpn-availability-15-mt-book/sec-state-fail-ipsec.html

Latest 350-701 Dumps Valid Version with 327 Q&As

Latest And Valid Q&A | Instant Download | Once Fail, Full Refund

Instant Download 350-701 PDF 350-701 Questions Online Training

2 Comments

Inline Feedbacks

View all comments

3 years ago

CE is right
.
Pls. read the manual / Web link provided by answer
.
Device Requirements
Stateful failover for IPsec requires that your network contains two identical routers that are available to be either the primary or secondary device. Both routers should be the same type of device, have the same CPU and memory, and have either no encryption accelerator or identical encryption accelerators.
.
.
Restrictions for Stateful Failover for IPsec
When configuring redundancy for a VPN, the following restrictions apply:
.
Both the active and standby devices must run the identical version of the Cisco IOS software, and both the active and standby devices must be connected via a hub or switch.
.

4 years ago

I think CE would be the correct answer