Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 6

Which two conditions are prerequisites for stateful failover for IPsec? (Choose two.)

Answer options

• A. Only the IKE configuration that is set up on the active device must be duplicated on the standby device; the IPsec configuration is copied automatically.
• B. The active and standby devices can run different versions of the Cisco IOS software but must be the same type of device.
• C. The IPsec configuration that is set up on the active device must be duplicated on the standby device.
• D. Only the IPsec configuration that is set up on the active device must be duplicated on the standby device; the IKE configuration is copied automatically.
• E. The active and standby devices must run the same version of the Cisco IOS software and must be the same type of device.

Correct answer: C, E

Explanation

The correct answers are C and E because for stateful failover, the IPsec configuration on the active device must be mirrored on the standby device, ensuring continuity in secure connections. Additionally, both devices must operate on the same IOS version and be of the same type to ensure compatibility and functionality during failover. Options A, B, and D are incorrect as they either misstate the requirements or suggest configurations that are not valid for stateful failover.