Examice

Exam 156-2158120 All QuestionsBrowse all questions from this exam

Question 44

Which of the following statements about Site-to-Site VPN Domain-based is NOT true?

Route-based- The Security Gateways will have a Virtual Tunnel Interface (VTI) for each VPN Tunnel with a peer VPN Gateway. The Routing Table can have routes to forward traffic to these VTIs. Any traffic routed through a VTI is automatically identified as VPN Traffic and is passed through the VPN Tunnel associated with the VTI.

Domain-based- VPN domains are pre-defined for all VPN Gateways.

A VPN domain is a service or user that can send or receive VPN traffic through a VPN Gateway.

Domain-based- VPN domains are pre-defined for all VPN Gateways. A VPN domain is a host or network that can send or receive VPN traffic through a VPN Gateway.

Domain-based- VPN domains are pre-defined for all VPN Gateways.

When the Security Gateway encounters traffic originating from one VPN Domain with the destination to a VPN Domain of another VPN Gateway, that traffic is identified as VPN traffic and is sent through the VPN Tunnel between the two Gateways.

Correct Answer: B

Domain-based VPNs refer to VPN domains that are predefined for all VPN Gateways, and these domains consist of hosts or networks that can send or receive VPN traffic through a VPN Gateway. Option B inaccurately states that a VPN domain can be a service or user, which is not true. Hence, the statement in Option B is incorrect.

Discussion

thakickbackOption: A

its A, cuz its explanation for route-based

EssentialDOption: B

It's B the one

kmdlsOption: B

a vpn domain or enc-domain can't have services or users inside of it it is the networks/hosts decided for the phase 2 also a VTI is indeed an interface created for the vpn and it allows implied routes to send packets in the vpn tunnel

FDZ83Option: B

a vpn domain is a "host or network" not a "service". Answer: B

BombastOption: A

It`s A