The HW network consists of Network A and B that are connected via Router HW1 and Router HW2. The HW network is shown in the following exhibit.

To set up an IPSec VPN between routers HW1 and HW2, which of the following crypto access-lists must be configured on Router HW1 in order to send LAN to LAN traffic across the encrypted VPN tunnel?

• A.rule permit ip source 192.168.1.10 destination 192.168.1.2 0
• B.rule permit ip source 10.1.1.0 0.0.0.255 destination 192.168.1.2 0
• C.rule permit ip source 192.168.1.10 destination 10.1.2.0 0.0.0.255
• D.rule permit ip source 10.1.2.0 0.0.0.255 destination 10.1.1.0 0.0.0.255
• E.rule permit ip source 10.1.1.0 0.0.0.255 destination 10.1.2.0 0.0.0.255

Comment: *

Name: *

Email: *

Verification: *

One BD in VXLAN can correspond to multiple VNI.

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

The HTTP protocol is based on TCP, so you can use the TCP Flood attack defense method to defend against HTTP Flood attacks.

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

The topology diagram and configuration are as follows. Now hope that there are no detailed routing entries of 10.6.3.3/32 in the R1 routing table. Which of the following statements can achieve this requirement? (Multiple Choice)

• A.Configure route summarization on R3 and summarize the routes to 10.0.0.0/16.
• B.Configure route summarization on R2 and summarize the routes to 10.0.0.0/16.
• C.Configure filter-policy on R1 and match the ACL to 10.0.0.3.3/32 and apply it in the import direction.
• D.Configure filter-policy on R2 and apply it to the export direction through ACL matching 10.0.0.3/32.

Comment: *

Name: *

Email: *

Verification: *

The following statement about the security confederation SA in IPsec, which is wrong?

• A.The SA is uniquely identified by a triplet that includes the Security Parameter Index (SP), the source IP address and the security protocol number used (AH or ESP).
• B.Use display IPsec to view information about encryption algorithms, traffic, and other information used between another IPsec peer.
• C.There must be two-way SA between IPsec peers to establish an IPsec VPN connection.
• D.IPsec only supports the use of symmetric encryption algorithms to encrypt data.

Comment: *

Name: *

Email: *

Verification: *