Question 5: With VTIs, which of the following would cause a working IPsec SA to show encrypt = 0 and decrypt = 0?

Choice: (choose correct answer): 

() Incompatible Diffie-Hellman 
() Incorrect crypto ACL
() No traffic crossing the VTI
() Incorrect crypto map configuration


Answer: No traffic crossing the VTI