When the CLI is used to configure an ISR for a site-to-site VPN connection, which two items must be specified to enable a crypto map policy? (Choose two.)

When the CLI is used to configure an ISR for a site-to-site VPN connection, which two items must be specified to enable a crypto map policy? (Choose two.)

• a valid access list
• encryption
• the default ISAKMP policy number
• IP addresses on all active interfaces
• the peer
• the IKE Phase 1 policy
  

  Answers Explanation & Hints: After the crypto map command in global configuration mode has been issued, the new crypto map will remain disabled until a peer and a valid access list have been configured.