350-701 · Question #312
350-701 Question #312: Real Exam Question with Answer & Explanation
The correct answer is B: Make the priority for the new policy 5 and the primary policy 1.. All IKE policies on the device are sent to the remote peer regardless of what is in the selected The first IKE Policy matched by the remote peer will be selected for the VPN connection. Choose which policy is sent first using the priority field. Priority 1 will be sent first. pro
Question
A Cisco FTD engineer is creating a new IKEv2 policy called s2s00123456789 for their organization to allow for additional protocols to terminate network devices with. They currently only have one policy established and need the new policy to be a backup in case some devices cannot support the stronger algorithms listed in the primary policy. What should be done in order to support this?
Options
- AChange the integrity algorithms to SHA* to support all SHA algorithms in the primary policy
- BMake the priority for the new policy 5 and the primary policy 1.
- CChange the encryption to AES* to support all AES algorithms in the primary policy
- DMake the priority for the primary policy 10 and the new policy 1
Explanation
All IKE policies on the device are sent to the remote peer regardless of what is in the selected The first IKE Policy matched by the remote peer will be selected for the VPN connection. Choose which policy is sent first using the priority field. Priority 1 will be sent first. protocols/215470- site-to-site-vpn-configuration-on-ftd-ma.html
Topics
Community Discussion
No community discussion yet for this question.