Juniper
JN0-633 · Question #61
You are asked to troubleshoot ongoing problems with IPsec tunnels and security policy processing. Your network consists of SRX240s and SRX5600s. Regarding this scenario, which two statements are…
The correct answer is B. You must enable data plane logging on the SRX5600 devices to generate security policy logs. D. IPsec logs are written to the kmd log file by default. See the full explanation below for the reasoning.
Question
You are asked to troubleshoot ongoing problems with IPsec tunnels and security policy processing. Your network consists of SRX240s and SRX5600s. Regarding this scenario, which two statements are true? (Choose two.)
Options
- AYou must enable data plane logging on the SRX240 devices to generate security policy logs.
- BYou must enable data plane logging on the SRX5600 devices to generate security policy logs.
- CIKE logs are written to the kmd log file by default.
- DIPsec logs are written to the kmd log file by default.
How the community answered
(23 responses)- A17% (4)
- B74% (17)
- C9% (2)
Community Discussion
No community discussion yet for this question.