Which IKE mode should you use?
You are configuring a VPN with IKE between headquarters and a branch office that uses a dynamic
public IP address. Which IKE mode should you use?
Which two statements are true about policy-based VPNs as compared to route-based IPsec VPNs when using ScreenO
Which two statements are true about policy-based VPNs as compared to route-based IPsec VPNs
when using ScreenOS devices? (Choose two.)
Which IKE feature would you enable?
You want to ensure that the IKE Phase 2 key is totally independent of the IKE Phase 1 key.
Which IKE feature would you enable?
Which two Diffie-Hellman (DH) groups are supported by ScreenOS software?
Which two Diffie-Hellman (DH) groups are supported by ScreenOS software? (Choose two.)
How is a route-based VPN different from a policy-based VPN?
How is a route-based VPN different from a policy-based VPN?
Which two statements are true about VPN Monitor on a ScreenOS device?
Which two statements are true about VPN Monitor on a ScreenOS device? (Choose two.)
Which two authentication algorithms does AutoKey IKE use during Phase 1 negotiations?
Which two authentication algorithms does AutoKey IKE use during Phase 1 negotiations? (Choose
two.)
Which two configuration additions will accomplish this goal?
You have created a site-to-site IPsec VPN between two devices. You want to keep the tunnel up at all
times, even when no user traffic is using it. Which two configuration additions will accomplish this
goal? (Choose two.)
what are two results that happen on the backup device?
When a new session is created on the primary ScreenOS device, what are two results that happen on
the backup device? (Choose two.)
Which two statements are true about redundant interfaces on a ScreenOS device?
Which two statements are true about redundant interfaces on a ScreenOS device? (Choose two.)