Free Cisco 350-701 Actual Exam Questions - Question 12 Discussion

B imo since it mentions a single IP, not a subnet, so it’s for that specific peer.

C imo since the crypto isakmp key command is used for IKEv1, it’s definitely about authenticating the peer’s IP, but it usually matches a single IP rather than a range. So C fits better than A or B.

B. The command clearly specifies a single IP address, not a subnet, so it’s about authenticating that specific peer at 172.16.0.0 using the key. Also, since it’s under the crypto isakmp key command, which relates to IKEv1, it matches B best. The options mentioning ranges or certificates don’t align with this syntax.

This command is part of ISAKMP, which is IKEv1, so it’s not for IKEv2 peers. That rules out A and confirms C is the better choice since it’s about authenticating a single IP with the key. C.

It’s B because the command specifies a single IP, not a subnet, so it authenticates the peer at 172.16.0.0 using the given key. The others mention ranges or certificates which don’t fit here.

Not A, because the command uses a single IP address, not a range like 172.16.0.0/16, so it can’t authenticate peers in a subnet. B fits better with the syntax shown.

B imo, this command is for one IP, not a subnet or certificates.

B imo, the command is about authenticating a single peer IP, not a whole subnet. The address here points to one host, so it can't cover a range like 172.16.0.0/16.

B/C for me. The command format usually deals with a single IP, so it's more about authenticating one peer, not a whole subnet. That makes C less likely since it mentions IKEv1 and a range.

B/C? The command uses a single IP, so it probably targets one peer only, not a whole subnet. ISAKMP keys typically apply per peer IP, making B more likely than C.

It’s B since the command specifies a single IP address, so it authenticates just that exact peer using the key ciscXXXXXXXX, not a whole subnet. The address isn’t treated as a network here.

That’s right, B feels like the way to go because MX records tell the internet where to send email for a domain. CNAME is for aliases, SPF and DKIM are more about verifying sender legitimacy than routing. So changing the MX record fits best here.

B imo, you'd modify the MX record to route inbound email properly.