About L2TP over IPsec VPN, which of the following statements is correct? (Choose two answers)

• A.IPSEC tunnel first establish
• B.L2TP packets trigger IPSEC SA
• C.L2TP tunnel first establish
• D.IPSEC L2TP tunnel packets trigger

Comment: *

Name: *

Email: *

Verification: *

In Defense gate FIN / RST Flood attack method, conversation is checked. The workflow is that when the door FIN / RST packet rate exceeds the threshold; it discards packets, and then starts the conversation check.

• A.FALSE
• B.TRUE

Comment: *

Name: *

Email: *

Verification: *

Two USG firewalls failed to establish an IPSec VPN tunnel through the NAT traversal mode. Run the display ike sa command to view the session without any UDP 500 session. What are the possible reasons?

• A.public network route is unreachable
• B.Intermediate line device disables UDP port 500
• C.Intermediate line device disables UDP 4500 port
• D.Intermediate line device disables ESP packets

Comment: *

Name: *

Email: *

Verification: *

An enterprise networking is shown as the following figure, the hot standby is configured on USG_A and USG_B, and USG_A is the master device. The administrator wants to configure SSL VPN on the firewall so that branch office employees can access the headquarters through SSL VPN.
What should the SSL VPN virtual gateway address be?

• A.202.38.10.3/24
• B.202.38.10.2/24
• C.10.100.10.2/24
• D.202.38.10.1/24

Comment: *

Name: *

Email: *

Verification: *

Scenario: In the virtual firewall technology which is more commonly used in business to provide a phase out of business. If the virtual firewall VFW1 leased to companies A, virtual firewall VFW2 leased enterprise B, which of the following statement is not correct?

• A.firms A and B alone can not manage their own virtual firewall, management must be implemented by the lessor administrator.
• B.firms A and B can address the overlap and use vlan divided into different virtual LANs.
• C.transparent to the user, the business between companies A and B is completely isolated from the enterprise, as with the use of a separate firewall deployment respectively.
• D.The system is a virtual firewall VFW1, VFW2 respectively independent system resources among each other.

Comment: *

Name: *

Email: *

Verification: *