Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 438

When a site-to-site VPN is configured in Cisco FMC, which topology is supported when crypto ACLs are used instead of protected networks to define interesting traffic?

Answer options

• A. hub-and-spoke
• B. full mesh
• C. DMVPN
• D. point-to-point

Correct answer: D

Explanation

The correct answer is D, point-to-point, as this topology is specifically supported when using crypto ACLs for defining interesting traffic. The other options, while valid VPN topologies, do not function with crypto ACLs in the same manner and may require different configurations or methods for traffic definition.