nerdexam
Check_Point

156-215.75 · Question #414

Of the following VPN Community options, which is most likely to provide a balance between IKE compatibility to VPN-capable devices (Check Point and non-Check Point) and preserving resources on the…

The correct answer is B. subnet, no permanent tunnels, Diffie-Hellman Group 2 for Phase 1. See the full explanation below for the reasoning.

Question

Of the following VPN Community options, which is most likely to provide a balance between IKE compatibility to VPN-capable devices (Check Point and non-Check Point) and preserving resources on the R75 Gateway? VPN tunnel sharing per:

Options

  • Apair of hosts, no permanent tunnels, Diffie-Hellman Group 1 for Phase 1.
  • Bsubnet, no permanent tunnels, Diffie-Hellman Group 2 for Phase 1.
  • Csubnet, permanent tunnels, Diffie-Hellman Group 1 for Phase 1.
  • Dpair of hosts, permanent tunnels, Diffie-Hellman Group 2 for Phase 1.

How the community answered

(28 responses)
  • A
    4% (1)
  • B
    82% (23)
  • C
    4% (1)
  • D
    11% (3)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 156-215.75 Practice