1.
You cannot add an IP address to one of your interfaces. What is most likely the problem?
2.
Which options must be configured for VPN redundancy? Select the two best options.
3.
Observe the following information: Active: 1, Dead: 0, Total 1 500f/0003, 1.1.1.2:500->1.1.1.1:23, PRESHR/grp2/3DES/SHA, xchg(2) resent-tmr 7166032 lifetime 28800 lt-recv 28800 nxt_rekey 28500 cert-expire 0 initiator, err cnt 0, send dir 0, cond 0x0 nat-traversal map not available ike heartbeat : disabled ike heartbeat last rcv time: 0 ike heartbeat last snd time: 0 XAUTH status: 0 What can you determine from the presented information? Select the TWO best answers.
4.
Observe the following information: total configured sa: 1 HEX ID Gateway Port Algorithm SPI Life:sec kb Sta PID vsys 00000001< 1.1.1.1 23 esp:3des/sha1 e3270b99 3200 unlim A/- 2 0 00000001> 1.1.1.1 23 esp:3des/sha1 3c472af5 3200 unlim A/- 1 0 What can you determine from the presented information? Select the TWO best answers.
5.
Observe the following information:
2005-07-29 10:20:20 system info 00536 Rejected an IKE packet on ethernet3 from 2.2.2.2:21 to 2.2.2.1:21 with cookies cfaf76fe7f73ae52 and 57436be50cbe5372 because the peer sent a proxy ID that did not match the one in the SA config.
2005-07-29 10:20:20 system info 00536 IKE<2.2.2.2> Phase 2: No policy exists for the proxy ID received: local
ID
(<192.168.1.1>/<255.255.255.255>, <0>,
<0>) remote ID (<192.168.2.0>/
<255.255.255.0>, <0>, <0>).
The policy for the initiator is:
src 192.168.2.0/24, dst 192.168.1.1/32, serv ANY
The policy for the recipient is:
src 192.168.1.0/24, dst 192.168.2.0/24, serv ANY
Which of the below options could be used to correct this issue?
6.
What is the default proxy-ID for a Route-based VPN?
7.
What must be configured on a Hub and Spoke VPN for it to be able to enforce policies? Select the 2 best answers.
8.
How many SNMP communities can be configured?
9.
In what event log does a SYN flood event appear?
10.
Which command can be used to display an interfaces hardware statistics?