Connecting the internal network interface address from the firewall By pinging the internal network address of the peer, the IPSec tunnel can be successfully triggered. The internal PC cannot trigger the tunnel establishment. What are the possible reasons?

• A.IKE proposal configuration problem
• B.packet filtering (inter-domain policy) configuration problem
• C.IPSec proposal configuration problem
• D.interested traffic ACL source network segment does not include the PC

Comment: *

Name: *

Email: *

Verification: *

Accessing the headquarters server through the IPSec VPN from the branch computer. The IPSec tunnel can be established normally, but the service is unreachable. What are the possible reasons?

• A.DPD detection parameters are inconsistent at both ends
• B.route oscillating
• C.packet is fragmented, and fragmented packets are discarded on the link.
• D.There is load sharing or dual-machine link, which may be inconsistent with the back and forth path.

Comment: *

Name: *

Email: *

Verification: *

If you use SSL VPN to provide file sharing, all files in the shared directory are visible to end users.
Which of the following descriptions is correct for the configuration of the file share path?

• A.Select SMB for file sharing resources under Linux.
• B.The format of the NFS type resource is: //IP address (host name)/dir1/dir2/shared folder. The NFS type resource path can only have one-level shared folder directory.
• C.Select SMB for file sharing resources under Windows.
• D.The format of the SMB type resource is: //IP address (host name)/shared folder. The SMB type resource path can be a multi-level shared folder directory.

Comment: *

Name: *

Email: *

Verification: *

Which of the following protocols does the USG firewall hot standby not include?

• A.VGMP
• B.IGMP
• C.VRRP
• D.HRP

Comment: *

Name: *

Email: *

Verification: *

An administrator to view the status information and IPsec Debug information is shown below. After going through the output, what is the most likely reason for failure?

• A.The end of the Security acl or does not match the peer Security acl
• B.The end ipsec proposal and peer ipsec proposal does not match
• C.The end ike remote name and peer ike name does not match
• D.The end ike ike peer strategies and policies do not match

Comment: *

Name: *

Email: *

Verification: *