Campus WAN VPN Design JN0-1103 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   In a campus WAN design, what role does a VPN typically play for branch connectivity?

   • AIt guarantees a fixed amount of bandwidth for each branch site
   • BIt eliminates the need for firewalls at the branch edge
   • CIt provides a secure logical overlay over a shared or public transport network
   • DIt provides a direct physical connection between the campus and each branch
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A university campus has multiple buildings connected by fiber, but the administration wants to allow remote faculty to securely access internal research databases from home. The remote faculty use a variety of devices, including personally owned laptops and tablets. Which VPN approach is most appropriate?

   • ARequire all faculty to use a specific VPN client software on a company-issued laptop
   • BUse GRE tunnels from each device to the campus network
   • CDeploy an SSL VPN portal that provides browser-based access to the databases
   • DConfigure site-to-site IPsec VPNs to each faculty member's home router
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which security mechanism is used to verify the identity of VPN peers during tunnel establishment?

   • AAuthentication (e.g., pre-shared keys or certificates)
   • BIntegrity checking (e.g., HMAC)
   • CEncryption (e.g., AES)
   • DFirewall filtering
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company is setting up a site-to-site VPN between its headquarters and a branch. The branch uses a dynamic IP address from its ISP. The headquarters has a static IP. Which configuration is required for the VPN to establish successfully?

   • ARequire the branch to use a static IP from its ISP
   • BConfigure the branch as the initiator with the headquarters' static IP as the peer
   • CConfigure the headquarters as the initiator with the branch's dynamic IP as the peer
   • DUse a GRE tunnel without IPsec to avoid IP address issues
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company needs to provide remote access to its internal network for 500 employees who use a mix of company-managed and personal devices. The security team requires multi-factor authentication (MFA) and the ability to enforce endpoint security posture checks before granting access. Which VPN technology should be selected?

   • ASite-to-site IPsec VPN
   • BGRE tunnel with IPsec
   • CA single IPsec tunnel for all remote users
   • DSSL VPN with client and clientless access
   Reveal Solution Discussion Select an answer first