nerdexam
Check_Point

156-215.71 · Question #315

Of the following VPN Community options, which is most likely to provide a balance between IKE compatibility to VPN-capable devices (Check Point and non-Check Point) and preserving resources on the…

The correct answer is B. subnet, no permanent tunnels, Diffie-Hellman Group 2 for Phase 1. See the full explanation below for the reasoning.

Question

Of the following VPN Community options, which is most likely to provide a balance between IKE compatibility to VPN-capable devices (Check Point and non-Check Point) and preserving resources on the R71 Gateway? VPN tunnel sharing per:

Options

  • Apair of hosts, no permanent tunnels, Diffie-Hellman Group 1 for Phase 1.
  • Bsubnet, no permanent tunnels, Diffie-Hellman Group 2 for Phase 1.
  • Csubnet, permanent tunnels, Diffie-Hellman Group 1 for Phase 1.
  • Dpair of hosts, permanent tunnels, Diffie-Hellman Group 2 for Phase 1.

How the community answered

(32 responses)
  • A
    9% (3)
  • B
    75% (24)
  • C
    3% (1)
  • D
    13% (4)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 156-215.71 Practice