Selected Answer: D In Cisco SD-WAN, when you set the OMP graceful restart timer, the IPsec rekey timer has to be at least twice the OMP graceful restart interval. • OMP graceful restart = 24 hours • Required IPsec rekey timer = 2 × 24 = 48 hours This keeps IPsec tunnels valid long enough during the OMP restart window so the tunnel does not tear down.

Selected Answer: D The default OMP graceful restart value is 12 hours and can be set up to a maximum of 604,800 seconds, which is equal to 7 days. The IPsec rekey timer is 24 hours by default, and even though both timers are configurable, the IPsec rekey timer must be at least two times the OMP graceful restart timer value. https://rafaesil.medium.com/ccie-ep-16-def-sd-wan-self-efficiency-experience-sec-65c6d4412733#:~:text=The%20default%20OMP%20graceful%20restart,the%20OMP%20graceful%20restart%20timer. Answer shold be D

Selected Answer: D https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/ios-xe-17/security-book-xe/configure-security-param.html