ExamGecko
Question list
Search
Search

Related questions











Question 202 - PCNSE discussion

Report
Export

A network administrator is troubleshooting an issue with Phase 2 of an IPSec VPN tunnel. The administrator determines that the lifetime needs to be changed to match the peer.

Where should this change be made?

A.
IKE Gateway profile
Answers
A.
IKE Gateway profile
B.
IPSec Crypto profile
Answers
B.
IPSec Crypto profile
C.
IPSec Tunnel settings
Answers
C.
IPSec Tunnel settings
D.
IKE Crypto profile
Answers
D.
IKE Crypto profile
Suggested answer: B

Explanation:

The **IKE crypto profile** is used to set up the encryption and authentication algorithms used for the key exchange process in IKE Phase 1, and lifetime of the keys, which specifies how long the keys are valid. To invoke the profile, you must attach it to the IKE Gateway configuration. The **IPSec crypto profile** is invoked in IKE Phase 2. It specifies how the data is secured within the tunnel when Auto Key IKE is used to automatically generate keys for the IKE SAs.

asked 23/09/2024
Musoke Kamuzze
30 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first