Valid 400-101 Dumps shared by ExamDiscuss.com for Helping Passing 400-101 Exam! ExamDiscuss.com now offer the newest 400-101 exam dumps, the ExamDiscuss.com 400-101 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com 400-101 dumps with Test Engine here:
By default, how does a GET VPN group member router handle traffic when it is unable to register to a key server?
Correct Answer: B
Explanation/Reference: Explanation: In the basic GETVPN configuration, the traffic passing through group members will be sent in clear until it registers with the Key Server. This is because the crypto ACL is configured on the KS and GM will get that information only after the registration is successful. This means for a short period of time the traffic can go out unencrypted after a GM is booted up or the existing GETVPN session is cleared manually. This mode is called "fail open" and it is the default behavior. This behavior can be turned off by configuring "Fail Close" mode on the GMs. Reference: http://www.cisco.com/c/en/us/products/collateral/security/group-encrypted-transport- vpn/ deployment_guide_c07_554713.html