Implementing Secure Solutions with Virtual Private Networks (SVPN) — Question 155

Which configuration allows a Cisco ASA to receive an IPsec connection from a peer with an unknown IP address?

Answer options

• A. dynamic crypto map
• B. dynamic tunnel group
• C. dynamic AAA attributes
• D. dynamic access policy

Correct answer: A

Explanation

The correct answer is A, as a dynamic crypto map allows the Cisco ASA to establish IPsec connections from peers whose IP addresses are not predefined. Options B, C, and D do not specifically address the requirement for handling connections from unknown IP addresses and serve different purposes in the context of Cisco ASA configurations.