156-315.76 Question #478: Real Exam Question with Answer & Explanation

Multi-Corp has two sites using certificates-based VPN issued by the Internal Certificate Authority (ICA). The two sites, Tokyo and Paris, are configured using a Simplified VPN policy. You are trying to integrate a new office opening in Dubai. You must enable all three sites to connect via the VPN to each other. Three Security Gateways are managed by the same SmartCenter Server behind the Paris Security Gateway. After creating the Dubai Gateway object with the proper VPN Domain, what must you do? 1. Verify the Rule Bases which will be installed on all three gateways allows the desired source and destination VPN traffic. 2. Add the Dubai Gateway object into the mesh VPN Community shared by Paris and Tokyo. 3. Manually generate an ICA Certificate on the VPN tab of the Dubai Gateway object by clicking the Add button. 4. Configure "Traditional mode VPN configuration" option in the Dubai Gateway object's VPN screen. Ensure that the "Support Authentication Methods: Public Key Signatures" is checked. 5. Reinstall the Security Policy on all three Gateways.