NSE 7 — Enterprise Firewall — Question 56

Which two statements about ADVPN are true? (Choose two.)

Answer options

• A. auto-discovery-receiver must be set to enable on the spokes.
• B. Spoke-to-spoke traffic never goes through the hub.
• C. It supports NAT for on-demand tunnels.
• D. Routing is configured by enabling add-advpn-route.

Correct answer: A, C

Explanation

Option A is correct because for ADVPN to function properly, the auto-discovery-receiver needs to be enabled on the spoke devices. Option C is also correct as ADVPN does support NAT for on-demand tunnels, allowing for dynamic connections. Options B and D are incorrect because spoke-to-spoke traffic can go through the hub in certain configurations, and routing is not configured by enabling add-advpn-route.