Juniper
JN0-533 · Question #19
Which two statements are true about policy-based VPNs as compared to route-based IPsec VPNs when using ScreenOS devices? (Choose two.)
The correct answer is B. For route-based IPsec VPNs, you can configure 0.0.0.0/0 as the proxy ID on both VPN gateways D. For policy-based IPsec VPNs, the proxy ID is derived from the policy. See the full explanation below for the reasoning.
Question
Which two statements are true about policy-based VPNs as compared to route-based IPsec VPNs when using ScreenOS devices? (Choose two.)
Options
- AFor policy-based IPsec VPNs, you can configure 0.0.0.0/0 as the proxy ID on both VPN gateways
- BFor route-based IPsec VPNs, you can configure 0.0.0.0/0 as the proxy ID on both VPN gateways
- CFor route-based IPsec VPNs, the proxy ID is derived from the policy.
- DFor policy-based IPsec VPNs, the proxy ID is derived from the policy.
How the community answered
(54 responses)- A11% (6)
- B83% (45)
- C6% (3)
Community Discussion
No community discussion yet for this question.