单项选择题

Regarding secure tunnel （st） interfaces， which statement is true？（）

A.You cannot assign st interfaces to a security zone.
B.You cannot apply static NAT on an st interface logical unit.
C.st interfaces are optional when configuring a route-based VPN
D.A static route can reference the st interface logical unit as the next-hop

点击查看答案

上一题目录下一题

相关考题

单项选择题

Which command is needed to change this policy to a tunnel policy for a policy-based VPN？（）
[edit security policies from-zone trust to-zone untrust]
user@host# show
policy tunnel-traffic {
match {
source-address local-net；
destination-address remote-net；
application any；
then {
permit；
}
}

A.set policy tunnel-traffic then tunnel remote-vpn
B.set policy tunnel-traffic then permit tunnel remote-vpn
C.set policy tunnel-traffic then tunnel ipsec-vpn remote-vpn permit
D.set policy tunnel-traffic then permit tunnel ipsec-vpn remote-vpn

多项选择题

Which two configuration elements are required for a policy-based VPN？（）

A.IKE gateway
B.secure tunnel interface
C.security policy to permit the IKE traffic
D.security policy referencing the IPsec VPN tunnel

多项选择题

Which two configuration elements are required for a route-based VPN？（）

A.secure tunnel interface
B.security policy to permit the IKE traffic
C.a route for the tunneled transit traffic
D.tunnel policy for transit traffic referencing the IPsec VPN