Overlapping IP Addresses JN0-637 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   You have configured NAT on a VPN gateway to handle overlapping addresses between two sites. Users report that they can ping the remote server but cannot access a web application on it. You suspect the NAT translation is not working for the specific traffic. Which command would you use to verify the NAT translations?

   • Ashow security nat translation
   • Bshow security ipsec security-associations
   • Cshow route
   • Dshow security ike security-associations
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the purpose of enabling NAT-T (NAT traversal) on an IPsec VPN?

   • ATo translate overlapping IP addresses into unique ranges before encryption.
   • BTo allow IPsec traffic to pass through devices performing NAT by encapsulating it in UDP.
   • CTo increase the encryption strength of the IPsec tunnel.
   • DTo compress the IPsec packets to reduce bandwidth usage.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company acquires a smaller firm. Both use the 10.0.0.0/8 private range internally. They connect their sites via an IPsec VPN. Users at the acquired site need to reach a specific server at the main site (10.1.1.10). The main site also has a server at 10.1.1.10. What is the most efficient way to allow this communication without changing the IP addressing at either site?

   • AEnable NAT-T on both VPN gateways and configure the VPN to use UDP encapsulation.
   • BConfigure static NAT on the acquired site's VPN gateway to translate the source addresses of traffic destined for the main site into a unique range, and add a route for that translated range back to the main site.
   • CConfigure dynamic NAT on the main site's VPN gateway to translate the destination address 10.1.1.10 to a different address for the acquired site's traffic.
   • DCreate a static route on the acquired site's gateway pointing to the main site's 10.1.1.10 via the VPN tunnel, and a static route on the main site's gateway pointing to the acquired site's 10.1.1.10 via the tunnel.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which command would you use to verify that IPsec security associations are established in an overlapping IP address VPN scenario?

   • Ashow configuration security ipsec
   • Bshow security ipsec security-associations
   • Cshow interfaces terse
   • Dshow security nat translations
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the purpose of applying NAT to overlapping addresses before IPsec encapsulation?

   • ATo ensure that the source and destination addresses are unique before the packet is encrypted and sent through the VPN.
   • BTo encrypt the addresses so that they are not visible to an attacker.
   • CTo compress the addresses to reduce the packet size.
   • DTo authenticate the addresses to ensure they belong to the correct VPN peer.
   Reveal Solution Discussion Select an answer first