Cisco
300-730 · Question #179
300-730 Question #179: Real Exam Question with Answer & Explanation
Sign in or unlock 300-730 to reveal the answer and full explanation for question #179. The question stem and answer options stay visible for context.
Troubleshooting VPNs
Question
A network administrator is troubleshooting an IPSec Site-to-Site VPN tunnel on a Cisco ASA firewall. The VPN tunnel is established but is unable to pass traffic between 192.168.10.155 and 192.168.100.172. The administrator observes this log message: `%ASA-4-402116: IPSEC: Received an ESP packet (SPI= 0x489041890C, sequence number= 0x9E) from 100.1.1.1 (user= 100.1.1.1) to 12.12.12.12. What must the administrator do to resolve this issue?
Options
- AImplement IKE Phase 1 proposal to match other firewall.
- BConfirm that IP address of tunnel interface is correctly configured.
- CConfigure ACL for interesting traffic to match remote firewall.
- DSetup identical Pre-shared keys must be on both firewalls.
Unlock 300-730 to see the answer
You've previewed enough free 300-730 questions. Unlock 300-730 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#IPsec site-to-site#crypto ACL#interesting traffic#ESP packet