Juniper
JN0-332 · Question #446
Which two statements are true about route-based IPsec VPNs on an SRX Series device? (Choose two)
The correct answer is C. An st0 interface must be bound to each VPN. D. A security policy must permit the traffic. See the full explanation below for the reasoning.
Question
Which two statements are true about route-based IPsec VPNs on an SRX Series device? (Choose two)
Options
- ARoute-based VPNs must use IKE aggressive mode.
- BNew tunnels are generated with each new flow of traffic.
- CAn st0 interface must be bound to each VPN.
- DA security policy must permit the traffic.
How the community answered
(31 responses)- A6% (2)
- B10% (3)
- C84% (26)
Community Discussion
No community discussion yet for this question.