Juniper JN0-533 Certification Exam Question 2
Which two statements are true about policy-based VPNs as compared to route-based IPsec VPNs when using ScreenOS devices? (Choose two.)
A. For policy-based IPsec VPNs, you can configure 0.0.0.0/ 0 as the proxy ID on both VPN gateways regardless of the security policy.
B. For route-based IPsec VPNs, you can configure 0.0.0.0/ 0 as the proxy ID on both VPN gateways regardless of the security policy.
C. For route-based IPsec VPNs, the proxy ID is derived from the policy.
D. For policy-based IPsec VPNs, the proxy ID is derived from the policy.
Answer: B,D
Which two statements are true about policy-based VPNs as compared to route-based IPsec VPNs when using ScreenOS devices? (Choose two.)
A. For policy-based IPsec VPNs, you can configure 0.0.0.0/ 0 as the proxy ID on both VPN gateways regardless of the security policy.
B. For route-based IPsec VPNs, you can configure 0.0.0.0/ 0 as the proxy ID on both VPN gateways regardless of the security policy.
C. For route-based IPsec VPNs, the proxy ID is derived from the policy.
D. For policy-based IPsec VPNs, the proxy ID is derived from the policy.
Answer: B,D
No comments:
Post a Comment