Implementing Secure Solutions with Virtual Private Networks (SVPN) — Question 94

Where must an engineer configure a preshared key for a site-to-site VPN tunnel configured on a Cisco ASA?

Answer options

• A. isakmp policy
• B. group policy
• C. crypto map
• D. tunnel group

Correct answer: D

Explanation

The preshared key for a site-to-site VPN tunnel on a Cisco ASA must be configured in the tunnel group, as this is where authentication information is stored. Options A, B, and C do not hold the preshared key; instead, they serve different purposes in the VPN configuration process.