Regarding an IPsec security association (SA), which two statements are true? (Choose two.)

Which operational mode command displays all active IPsec phase 2 security associations?

Two VPN peers are negotiating IKE phase 1 using main mode. Which message pair in the
negotiation contains the phase 1 proposal for the peers?

Which attribute is required for all IKE phase 2 negotiations?

Which attribute is optional for IKE phase 2 negotiations?

A route-based VPN is required for which scenario?

A policy-based IPsec VPN is ideal for which scenario?

Regarding a route-based versus policy-based IPsec VPN, which statement is true?

Which two configuration elements are required for a route-based VPN? (Choose two.)

Click the Exhibit button.
[edit security]
user@host# show
ike {
policy ike-policy1 {
mode main;
proposal-set standard;
pre-shared-key ascii-text “$9$GFjm5OBEclM5QCuO1yrYgo”; ## SECRET-DATA
}
gateway remote-ike {
ike-policy ike-policy1;
address 172.19.51.170;
external-interface ge-0/0/3.0;
}}
ipsec {
policy vpn-policy1 {
proposal-set standard;

}
vpn remote-vpn {
ike {
gateway remote-ike;
ipsec-policy vpn-policy1;
}}}
Assuming you want to configure a route-based VPN, which command is required to bind the VPN
to secure tunnel interface st0.0?