In an enterprise network, USG A and USG B have established an IPsec VPN. The administrator needs to simulate traffic from server A to server B to test the connection.
What ping command should the administrator use to simulate this traffic?

• A.Ping -s
• B.Ping -c
• C.Ping -t
• D.Ping -a

Comment: *

Name: *

Email: *

Verification: *

The figure shows the data flow direction of the Bypass interface in the Bypass working mode and the non-Bypass working mode. What are the following statements about the working flow of the electrical Bypass interface?

• A.The electrical bypass interface can only work in Layer 2 mode and has circuit bypass function.
• B.When the interface is working in the Bypass state, the traffic is forwarded from the GE0 interface to the USG. The USG does not pass any processing and flows directly from the GE1 interface to Router_B.
• C.When the interface is in the non-bypass state, the traffic flows from the GE0 interface to the USG through Router_a. After the USG processes, the traffic flows from the GE1 interface to Router_B.
• D.When the firewall is configured to implement the security priority, the uplink and downlink services are not interrupted when the interface works in the bypass state. Therefore, the device can be kept in the Bypass state.

Comment: *

Name: *

Email: *

Verification: *

In the IKE v1 negotiation, which of the following statements is wrong about the difference between the aggressive mode and the main mode?

• A.The main mode negotiation message has 6 and the aggressive mode has 3.
• B.In the NAT traversal scenario, the peer ID cannot use an IP address.
• C.The main mode encrypts the exchange information of identity information, while the aggressive mode does not encrypt the identity information.
• D.The main mode does not support NAT traversal in the pre-shared key mode, but aggressive mode support.

Comment: *

Name: *

Email: *

Verification: *

The IKE first stage main mode negotiation process includes the following information?
(Choose three answers)

• A.DH key exchange public information
• B.IKE proposal set
• C.Both sides identity
• D.IPsec proposal set

Comment: *

Name: *

Email: *

Verification: *

In a dual-system hot standby network, the NAT configurations of the two USGs are consistent. When the address in the NAT address pool is on the same network segment as the virtual IP address of the VRRP backup group, the next two graphs show the ARP response of the NAT server and VRRP combination application (lack of a picture).

• A.Figure 1 does not bind the NAT address pool to the VRRP backup group on the interface connected to the Internet. Figure 2 does not bind the NAT address pool to the VRRP backup group on the interface connected to the Internet.
• B.Figure 1 does not bind the NAT address pool to the VRRP backup group on the interface connected to the Internet. Figure 2 does not bind the NAT address pool to the VRRP backup group on the interface connected to the Internet.
• C.Figure 1 does not bind the NAT address pool to the VRRP backup group on the interface connected to the Internet. Figure 2 Binds the NAT address pool to the VRRP backup group on the interface connected to the Internet.
• D.Figure 1 binds the NAT address pool to the VRRP backup group on the interface connected to the Internet. Figure 2 Binds the NAT address pool to the VRRP backup group on the interface connected to the Internet.

Comment: *

Name: *

Email: *

Verification: *