Online Access Free JN0-330 Practice Test

Regarding a route-based versus policy-based IPSec VPN, which statement is true?

• A.A route-based VPN cannot have a deny action in a policy; a policy-based VPN can have a deny action.
• B.A route-based VPN generally uses less resources than a policy-based VPN.
• C.A route-based VPN uses a policy referencing the IPSec VPN; a policy-based VPN policy does not use a policy referencing the IPSec VPN.
• D.A route-based VPN is better suited for dialup or remote access VPNs compared to a policy-based VPN.

Which two statements about the Diffie-Hellman (DH) key exchange process are correct?
(Choose two.)

• A.In the DH key exchange process, the session key is passed across the network to the peer for confirmation.
• B.In the DH key exchange process, the session key is never passed across the network.
• C.In the DH key exchange process, the public and private keys are mathematically related using the DH algorithm.
• D.In the DH key exchange process, the public and private keys are not mathematically related, ensuring higher security.

Click the Exhibit button.
Given the configuration in the exhibit, which statement describes what will happen to the traffic flow matching this policy?

• A.The traffic will be permitted if the user passes authentication.
• B.The router will perform source NAT using a NAT pool. The traffic will be permitted and the system will log the session when it establishes and when it closes it.
• C.The traffic will be permited but will be dropped because there is no interface defined for the source-nat.
• D.The traffic will be permitted and the router will perform source NAT using interface- based NAT. The system will log when the session is established and when the session is closed. The system will also count the traffic hitting this rule.

Click the Exhibit button.
In the exhibit, what is the priority for Router B in VRRP group 100?

• A.110
• B.255
• C.1
• D.100

Regarding an IPSec security association (SA), which two statements are true? (Choose two.)

• A.IKE SA is established during phase 2 negotiations.
• B.IPSec SA is established during phase 2 negotiations.
• C.IPSec SA is bidirectional.
• D.IKE SA is bidirectional.