Dynamic Gateways JN0-637 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A network engineer is troubleshooting a dynamic route-based VPN where a remote site cannot establish a tunnel. The remote site's IP has changed since the last successful connection. The hub's dynamic gateway is configured with a wildcard peer. Which command should the engineer use to verify that the hub is receiving IKE negotiations from the remote site?

   • Ashow security ike debug
   • Bshow security ike security-associations
   • Cshow security ike traceoptions
   • Dshow log ike-debug
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A managed security provider operates a hub-and-spoke VPN where 50 remote sites connect to a central hub. The provider wants to authenticate each site without storing a shared secret on the hub for every site. The sites use dynamic IP addresses. Which authentication method should be configured on the hub's dynamic gateway?

   • APreshared keys with a different key per site, stored in the hub configuration.
   • BA single preshared key shared by all sites.
   • CRADIUS authentication with a single shared password for all sites.
   • DCertificate-based authentication using a PKI, with each site holding a unique certificate.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   When configuring a dynamic gateway for a route-based VPN, which component is used to bind the VPN to the tunnel interface?

   • AThe 'traffic-selector' statement under the VPN configuration.
   • BThe 'bind-interface' statement under the VPN configuration.
   • CThe 'security-policy' statement under the VPN configuration.
   • DThe 'ike-gateway' statement under the VPN configuration.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which authentication method is commonly used with dynamic IPsec gateways in Junos OS when certificates are not deployed?

   • ALDAP authentication.
   • BTACACS+ authentication.
   • CRADIUS authentication.
   • DPreshared keys.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which configuration element is required when configuring a dynamic IPsec gateway in Junos OS?

   • AA security policy that permits all traffic from any source.
   • BA static route to the remote peer's IP address.
   • CA certificate from a public certificate authority.
   • DAn IKE policy that defines authentication and encryption parameters.
   Reveal Solution Discussion Select an answer first