Overlapping IP Addresses JN0-637 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   Two companies merge and need to connect their networks via IPsec VPN. Both use 172.16.0.0/16 internally. They want to allow all users at Company A to access a specific server at Company B (172.16.5.10). Company A has a large number of users. What is the most appropriate NAT strategy?

   • AConfigure static NAT for each user on Company A's gateway.
   • BConfigure a static route on Company A's gateway pointing to 172.16.5.10 via the VPN tunnel.
   • CConfigure NAT-T on both gateways and use UDP encapsulation.
   • DConfigure dynamic NAT on Company A's gateway for all traffic destined to Company B's network, translating source addresses to a unique pool (e.g., 10.0.0.0/16).
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which network topology is most likely to cause an overlapping IP address problem for an IPsec VPN?

   • ATwo branch offices use 10.1.0.0/16 and 10.2.0.0/16 respectively and connect to a central hub via IPsec VPNs.
   • BTwo branch offices both use the 10.0.0.0/16 subnet for their internal LANs and connect to a central hub via IPsec VPNs.
   • CA branch office uses 192.168.1.0/24 and the central hub uses 172.16.0.0/16 for their internal LANs.
   • DA remote user connects from a public IP address to a corporate network using an IPsec VPN.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which scenario describes an overlapping IP address situation in an IPsec VPN?

   • AA site uses 192.168.1.0/24 and another site uses 192.168.2.0/24 for their internal networks.
   • BA site uses 10.0.0.0/8 and another site uses 172.16.0.0/12 for their internal networks.
   • CA site uses a public IP address range for its internal network and another site uses a private range.
   • DTwo sites both use the 192.168.1.0/24 subnet for their internal networks and connect via IPsec VPN.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary reason overlapping IP addresses require NAT in an IPsec VPN?

   • ATo encrypt the overlapping addresses so that they cannot be read by an attacker.
   • BTo compress the overlapping addresses to reduce the size of the routing table.
   • CTo authenticate the overlapping addresses to ensure they belong to the correct VPN peer.
   • DTo translate overlapping addresses so that each site's traffic is uniquely identifiable and routable across the VPN.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   How does NAT-T (NAT traversal) modify IPsec encapsulation?

   • AIt changes the IPsec protocol from ESP to AH.
   • BIt adds an additional IP header to the IPsec packet.
   • CIt encapsulates IPsec packets in UDP, typically using port 4500.
   • DIt encrypts the IPsec packet twice for additional security.
   Reveal Solution Discussion Select an answer first