单项选择题

Which command is needed to change this policy to a tunnel policy for a policy-based VPN？（）
[edit security policies from-zone trust to-zone untrust]
user@host# show
policy tunnel-traffic {
match {
source-address local-net；
destination-address remote-net；
application any；
then {
permit；
}
}

A.set policy tunnel-traffic then tunnel remote-vpn
B.set policy tunnel-traffic then permit tunnel remote-vpn
C.set policy tunnel-traffic then tunnel ipsec-vpn remote-vpn permit
D.set policy tunnel-traffic then permit tunnel ipsec-vpn remote-vpn

点击查看答案

上一题目录下一题

相关考题

多项选择题

Which two configuration elements are required for a policy-based VPN？（）

A.IKE gateway
B.secure tunnel interface
C.security policy to permit the IKE traffic
D.security policy referencing the IPsec VPN tunnel

多项选择题

Which two configuration elements are required for a route-based VPN？（）

A.secure tunnel interface
B.security policy to permit the IKE traffic
C.a route for the tunneled transit traffic
D.tunnel policy for transit traffic referencing the IPsec VPN

单项选择题

Regarding a route-based versus policy-based IPsec VPN， which statement is true？（）

A.A route-based VPN generally uses less resources than a policy-based VPN.
B.A route-based VPN cannot have a deny action in a policy； a policy-based VPN can have a deny action.
C.A route-based VPN is better suited for dialup or remote access compared to a policy-based VPN.
D.A route-based VPN uses a policy referencing the IPsec VPN； a policy-based VPN policy does not use apolicy referencing the IPsec VPN