Implementing Secure Solutions with Virtual Private Networks (SVPN) — Question 141

A user at a company HQ is having trouble accessing a network share at a branch site that is connected with a L2L IPsec VPN. While troubleshooting, a network security engineer runs a packet tracer on the Cisco ASA to simulate the user traffic and discovers that the encryption counter is increasing but the decryption counter is not. What must be configured to correct this issue?

Answer options

• A. Adjust the routing on the remote peer device to direct traffic back over the tunnel.
• B. Adjust the preshared key on the remote peer to allow traffic to flow over the tunnel.
• C. Adjust the transform set to allow bidirectional traffic.
• D. Adjust the peer IP address on the remote peer to direct traffic back to the ASA.

Correct answer: A

Explanation

The correct answer is A because adjusting the routing on the remote peer device ensures that the return traffic is correctly routed back through the established tunnel. Options B and D do not address the routing issue, while C does not ensure the necessary routing adjustments are made for the traffic to flow correctly.