Which of the following are purposes of NAT traversal in IPsec? (Choose two.)

• A.To detect intermediary NAT devices in the tunnel path.
• B.To dynamically change phase 1 negotiation mode aggressive mode.
• C.To encapsulation ESP packets in UDP packets using port 4500.
• D.To force a new DH exchange with each phase 2 rekey

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Review the intrusion prevention system (IPS) profile signature settings shown in the exhibit.
What do you conclude when adding the FTP.Login.Failed signature to the IPS sensor profile?

• A.Traffic matching the signature will be allowed and logged.
• B.The signature setting uses a custom rating threshold.
• C.The signature setting includes a group of other signatures.
• D.Traffic matching the signature will be silently dropped and logged.

Comment: *

Name: *

Email: *

Verification: *

An employee needs to connect to the office through a high-latency internet connection.
Which SSL VPN setting should the administrator adjust to prevent SSL VPN negotiation failure?

• A.SSL VPN idle-timeout
• B.SSL VPN login-timeout
• C.SSL VPN dtls-hello-timeout
• D.SSL VPN session-ttl

Comment: *

Name: *

Email: *

Verification: *

Which two IP pool types are useful for carrier-grade NAT deployments? (Choose two.)

• A.Port block allocation
• B.Fixed port range
• C.One-to-one
• D.Overload

Comment: *

Name: *

Email: *

Verification: *

Which statement about the deployment of the Security Fabric in a multi-VDOM environment is true?

• A.Downstream devices can connect to the upstream device from any of their VDOMs
• B.Each VDOM in the environment can be part of a different Security Fabric
• C.VDOMs without ports with connected devices are not displayed in the topology
• D.Security rating reports can be run individually for each configured VDOM

Comment: *

Name: *

Email: *

Verification: *