You are configuring a VPN with IKE between headquarters and a branch office that uses a
dynamic public IP address. Which IKE mode should you use?

Which two statements are true about policy-based VPNs as compared to route-based IPsec VPNs
when using ScreenOS devices? (Choose two.)

You want to ensure that the IKE Phase 2 key is totally independent of the IKE Phase 1 key.
Which IKE feature would you enable?

Which two Diffie-Hellman (DH) groups are supported by ScreenOS software? (Choose two.)

How is a route-based VPN different from a policy-based VPN?

Which two statements are true about VPN Monitor on a ScreenOS device? (Choose two.)

Which two authentication algorithms does AutoKey IKE use during Phase 1 negotiations? (Choose
two.)

You have created a site-to-site IPsec VPN between two devices. You want to keep the tunnel up
at all times, even when no user traffic is using it. Which two configuration additions will accomplish
this goal? (Choose two.)

When a new session is created on the primary ScreenOS device, what are two results that happen
on the backup device? (Choose two.)

Which two statements are true about redundant interfaces on a ScreenOS device? (Choose two.)