FCSS_NST_SE-7.4 · Question #102
Refer to the exhibit, which contains the output of the command diagnose vpn tunnel list. Reviewing the debug command, what is the current status of the traffic flowing through the tunnel?
The correct answer is C. The inbound IPsec SA was copied to the NPU. The debug shows npu_flag=02 and dec_npu=1/1, meaning only the inbound (decrypt) IPsec SA has been offloaded to the NPU. Value 02 corresponds to inbound/offload, so the inbound SA was copied to hardware. Exam Questions, Study Guides, Practice Tests. Lead the way to help you pass…
Question
Refer to the exhibit, which contains the output of the command diagnose vpn tunnel list. Reviewing the debug command, what is the current status of the traffic flowing through the tunnel?
Exhibit
Options
- ATraffic is flowing with an asymmetric selector.
- BThere is an unsupported cipher or HMAC
- CThe inbound IPsec SA was copied to the NPU.
- DThe outbound IPsec SA was copied to the NPU.
How the community answered
(43 responses)- A2% (1)
- B14% (6)
- C74% (32)
- D9% (4)
Explanation
The debug shows npu_flag=02 and dec_npu=1/1, meaning only the inbound (decrypt) IPsec SA has been offloaded to the NPU. Value 02 corresponds to inbound/offload, so the inbound SA was copied to hardware. Exam Questions, Study Guides, Practice Tests. Lead the way to help you pass any IT Certification exams, 100% Pass Guaranteed or Full Refund. Especially Cisco, Microsoft, CompTIA, Citrix, EMC, HP, Oracle, VMware, Juniper, Check Point, LPI, Nortel, EXIN and so on. Our Slogan: First Test, First Pass. Help you to pass any IT Certification exams at the first try. You can reach us at any of the email addresses listed below. Any problems about IT certification or our products, you could rely upon us, we will give you satisfactory answers in 24 hours.
Topics
Community Discussion
No community discussion yet for this question.