While troubleshooting an IPsec connection between a Cisco WAN edge router and an Amazon Web Services (AWS) endpoint, a network engineer observes that the security association status is active, but no traffic flows between the devices What is the problem?

Refer to the exhibit.

While troubleshooting an IPsec connection between a Cisco WAN edge router and an Amazon Web Services (AWS) endpoint, a network engineer observes that the security association status is active, but no traffic flows between the devices What is the problem?
A . wrong ISAKMP policy
B . identity mismatch
C . wrong encryption
D . IKE version mismatch

View Answer

Answer: C

Explanation:

The network engineer should verify that both the Cisco WAN edge router and the AWS endpoint have matching encryption configurations for Phase 2 of the IPsec setup. This could involve checking the transform set or the IPsec profile configuration.