Examice

Exam 156-31581 All QuestionsBrowse all questions from this exam

Question 315

Which of the following statements about Site-to-Site VPN Domain-based is NOT true?

Domain-based- VPN domains are pre-defined for all VPN Gateways.

When the Security Gateway encounters traffic originating from one VPN Domain with the destination to a VPN Domain of another VPN Gateway, that traffic is identified as VPN traffic and is sent through the VPN Tunnel between the two Gateways.

Route-based- The Security Gateways will have a Virtual Tunnel Interface (VTI) for each VPN Tunnel with a peer VPN Gateway. The Routing Table can have routes to forward traffic to these VTIs. Any traffic routed through a VTI is automatically identified as VPN Traffic and is passed through the VPN Tunnel associated with the VTI.

Domain-based- VPN domains are pre-defined for all VPN Gateways.

A VPN domain is a service or user that can send or receive VPN traffic through a VPN Gateway.

Domain-based- VPN domains are pre-defined for all VPN Gateways. A VPN domain is a host or network that can send or receive VPN traffic through a VPN Gateway.

Correct Answer: C

A VPN domain is a pre-defined set of hosts or networks that can send or receive VPN traffic through a VPN Gateway. It is not accurate to describe a VPN domain as a service or user, making the statement that a VPN domain is a service or user incorrect. Therefore, the statement that a VPN domain is a service or user which can send or receive VPN traffic is not true.

Discussion

AraminskiOption: C

"C" correct, VPN domain is NOT a service or user.

bullshitOption: C

C is the right answer

BombastOption: D

Domain-based- VPN domains are pre-defined for all VPN Gateways. A VPN domain is a service or user that can send or receive VPN traffic through a VPN Gateway. This statement is not true because a VPN domain is not a service or user, but a host or network that can send or receive VPN traffic through a VPN Gateway1. This is the definition given in the Site to Site VPN R81 Administration Guide1. The other statements are true according to the same guide1.

Bombast

mistake- C is correct

VMACOption: C

We're looking for a statement which is NOT true. So it's "C".

okatsladzOption: A

stupid question b c d is incorrect in the same time B - is about Route Based C - Domain is defenetrly not a user D - nuff said

DreschiOption: D

D is correct. Domain Based VPN controls how VPN traffic is routed between Security Gateways within a community by defining which peers have responsibility for each of the networks, servers, and hosts in the security environment. To route traffic to a host behind a Security Gateway, administrators must first determine the VPN domain for that Security Gateway.