PrepAway - Latest Free Exam Questions & Answers

Author: seenagape

Which configuration parameter is missing at the hub to complete the configuration?

Click the Exhibit button.
Referring to the exhibit, you are setting up the hub in a hub-and-spoke IPsec VPN. You have
verified that all configured parameters are correct at all sites, but your IPsec VPN is not
establishing to both sites.
Which configuration parameter is missing at the hub to complete the configuration?

What needs to be modified in the configuration shown in the exhibit?

— Exhibit —
security {
ike {
policy IKE-STANDARD {
mode aggressive;
proposal-set standard;
pre-shared-key ascii-text “XXXXXX”;
}
gateway GW-HUB {
ike-policy IKE-STANDARD;
dynamic hostname site1.company.com;
external-interface ge-0/0/0.0;
}
}
ipsec {
policy IPSEC-STANDARD {
proposal-set standard;
}
vpn VPN-HUB {
bind-interface st0.0;
ike {
gateway GW-HUB;
ipsec-policy IPSEC-STANDARD;
}
}
}
zones {
security-zone untrust {
host-inbound-traffic {
system-services {
ping;
ike;
}
}
interfaces {
ge-0/0/0.0;
}
}
security-zone trust {
system-services {

ping;
}
interfaces {
ge-0/0/1.0;
}
}
}
}
— Exhibit —
Click the Exhibit button.
You are implementing a new route-based IPsec VPN on an SRX Series device and the
tunnel will not establish.
What needs to be modified in the configuration shown in the exhibit?


Page 632 of 1,293« First...102030...630631632633634...640650660...Last »