Routing with IPsec JN0-637 Practice Questions (Page 4)

Questions 16–18

1. 16foundation · easy

   In a routing policy used for policy-based routing of IPsec traffic, which match condition is commonly used to identify traffic that should be sent through the tunnel?

   • AInterface the packet arrived on
   • BSource and destination IP addresses
   • CIKE security parameter index
   • DIPsec security association index
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   You have two IPsec tunnels between your main office and a remote site. OSPF is running over both tunnels, and you want the primary tunnel (over MPLS) to be preferred, with automatic failover to the backup tunnel (over Internet) if the primary fails. You have configured OSPF on both tunnel interfaces. What should you do to ensure the primary tunnel is preferred?

   • ASet a higher route preference for OSPF routes on the backup tunnel.
   • BUse static routes with a lower preference for the primary tunnel and rely on OSPF for failover.
   • CSet a higher OSPF metric on the backup tunnel interface.
   • DSet a lower OSPF metric on the backup tunnel interface.
   Reveal Solution Discussion Select an answer first
3. 18foundation · easy

   In Junos OS, how is an IPsec tunnel typically represented in the routing table so that traffic can be directed into it?

   • AAs a direct route automatically installed when the tunnel is established
   • BAs a dynamic route learned from the IPsec peer via the IKE daemon
   • CAs a logical interface (st0.x) that can be referenced as a next-hop or interface in routing options
   • DAs a static route with a next-hop of the tunnel's destination IP address
   Reveal Solution Discussion Select an answer first