Implementing Cisco IP Routing (CCNP ROUTE, legacy) — Question 79

A network engineer executes the show crypto ipsec sa command. Which three pieces of information are displayed in the output? (Choose three.)

Answer options

• A. inbound crypto map
• B. remaining key lifetime
• C. path MTU
• D. tagged packets
• E. untagged packets
• F. invalid identity packets ABC

Correct answer:

Explanation

The correct answers are A, B, and F. The 'inbound crypto map' indicates which security association is being applied for incoming traffic, 'remaining key lifetime' shows how long the current encryption key is valid, and 'invalid identity packets' refers to packets that could not be authenticated. Options C, D, and E do not pertain to the information provided by the show crypto ipsec sa command.