CCSP SECUR Exam Cram 2 (642-501)

Question 1

Which of the following items determine which type of IPSec failover to use?

  • A. GRE

  • B. HSRP

  • C. IKE keepalive

  • D. IPSec keepalive

  • E. VRRP

A1:

Answers: A, C. If using IPSec without GRE, you use IKE keepalives for failover. If using IPSec with GRE, you use GRE, and thus routing protocols, for failover.

Question 2

What term refers to a network group or transform set by the Router MC?

  • A. Activities

  • B. Building blocks

  • C. Deployment

  • D. Jobs

  • E. Tunnels

A2:

Answer: B. Building blocks are reusable named global components within the Router MC. Building blocks refer to transform sets and network groups only.

Question 3

Select the algorithms used in the default IKE policy by the Router MC.

  • A. Diffie-Hellman 1

  • B. Diffie-Hellman 2

  • C. DES

  • D. 3DES

  • E. MD5

A3:

Answers: B, D. The default IKE policies on the Router MC are different from the IOS router IKE policies. SHA is the default hash algorithm, not MD5.

Related

Категории