Campus WAN VPN Design JN0-1103 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company is deploying a site-to-site VPN and wants to ensure that only authorized devices can establish the VPN. The company also wants to verify that the VPN peer is who it claims to be. Which mechanism should be used for peer authentication?

   • AUsername and password
   • BMAC address filtering
   • CPre-shared keys
   • DDigital certificates
   Reveal Solution Discussion Select an answer first
2. 7application · easy

   A company with a single headquarters and 20 branch offices is considering using the public internet for WAN connectivity instead of leased lines. The company needs to ensure that data between sites is protected from eavesdropping. What is the role of a VPN in this design?

   • ATo encrypt traffic so that it is unreadable if intercepted on the public internet
   • BTo replace the need for a firewall at each site
   • CTo increase the bandwidth of the internet connection
   • DTo provide a dedicated physical path for the traffic
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A logistics company has 100 branch sites that frequently exchange shipment tracking data with each other. The network team is evaluating hub-and-spoke and full-mesh VPN topologies. The primary concern is minimizing the performance bottleneck at any single point in the network. Which design should be recommended?

   • AFull-mesh with direct tunnels between all branch pairs
   • BHub-and-spoke with two redundant hubs
   • CHub-and-spoke with a single high-capacity hub at headquarters
   • DPartial-mesh connecting only branches with the highest traffic volumes
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company is deploying a site-to-site VPN between two locations. The link must support high-throughput data transfers, and the network team is concerned about the CPU load on the VPN gateway. Which approach can reduce the CPU overhead of encryption?

   • AIncrease the number of tunnels between the sites
   • BEnable hardware acceleration for IPsec on the gateway
   • CUse a longer encryption key, such as AES-256
   • DDisable authentication on the VPN
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is a primary advantage of a full-mesh VPN topology over a hub-and-spoke topology?

   • AIt simplifies configuration and management for large numbers of sites
   • BIt provides direct connectivity between all sites, reducing latency for inter-site traffic
   • CIt centralizes security policy enforcement at a single point
   • DIt requires fewer tunnels as the number of sites increases
   Reveal Solution Discussion Select an answer first