300-420 Question 52
Single answerAn enterprise network design requires secure communication between branch offices over a public network. The solution must support dynamic multipoint connections while minimizing configuration complexity. Which overlay tunneling technology would be the most suitable for this scenario?
- A
Generic Routing Encapsulation (GRE)
- B
Dynamic Multipoint VPN (DMVPN)
- C
IPsec VPN without overlay routing
- D
VXLAN
Show answer and explanation
Correct answer: B
Explanation
Dynamic Multipoint VPN (DMVPN) is the most suitable solution for this scenario because it allows dynamic, secure communication between branch offices over a public network. By using technologies like NHRP, DMVPN minimizes the configuration complexity associated with traditional point-to-point VPN solutions. Additionally, it integrates with IPsec for data encryption, ensuring secure communication.
- A. Incorrect.
GRE is a point-to-point tunneling protocol that does not natively support dynamic multipoint connections, making it less suitable for this scenario.
- B. Correct.
DMVPN is specifically designed for dynamic multipoint communication, allowing branches to securely connect over a public network with minimal configuration complexity. It supports dynamic tunnel establishment using NHRP and integrates with IPsec for encryption.
- C. Incorrect.
IPsec VPN without overlay routing provides encryption but lacks the capability to dynamically establish multipoint connections, which increases configuration complexity for this use case.
- D. Incorrect.
VXLAN is primarily used for Layer 2 overlay networks, such as data center environments, and is not suitable for branch-to-branch secure communication over a public network.