Site to Site IPSec VPN negotiation failed. Which of the following should be checked? 1. Network connectivity issues; 2. View the establishment of IKE phase 1 security associations and related configurations; 3. View the establishment of IKE phase 2 security associations and related configurations; 4. See if the security ACLs at both ends mirror each other.

• A.1 4 2 3
• B.4 2 3 1
• C.2 3 1 4
• D.4 1 2 3

Comment: *

Name: *

Email: *

Verification: *

What are the following VPN protocols that do not provide encryption?

• A.GRE
• B.AH
• C.ESP
• D.L2TP

Comment: *

Name: *

Email: *

Verification: *

After the firewall creates a new security instance, the firewall does not have any security zones assigned to the new instance and the administrator needs to configure them.

• A.TRUE
• B.FALSE

Comment: *

Name: *

Email: *

Verification: *

The testing center is responsible for detecting the traffic and sending the inspection result to the management center. The management center sends the drainage strategy to the cleaning center for drainage cleaning.

• A.TRUE
• B.FALSE

Comment: *

Name: *

Email: *

Verification: *

IPsec tunneling is used as a backup connection as shown below:

Which of the following statements are true about the tunnel interface? (Choose two answers)

• A.Tunnel interfaces can be added to any security zone, provided they have the appropriate inter-domain security policies.
• B.IPsec security policy should be applied to the tunnel interface
• C.Protocol for the Tunnel Interface must be GRE.
• D.Tunnel interface needs to be configured on the IP address and the IP address of the gateway. The external network IP address of the outgoing interface must be in the same network segment.

Comment: *

Name: *

Email: *

Verification: *