单项选择题
Regarding secure tunnel （st） interfaces， which statement is true？（）
A.You cannot assign st interfaces to a security zone.
B.You cannot apply static NAT on an st interface logical unit.
C.st interfaces are optional when configuring a route-based VPN
D.A static route can reference the st interface logical unit as the next-hop
相关考题
-
单项选择题
Which command is needed to change this policy to a tunnel policy for a policy-based VPN？（） [edit security policies from-zone trust to-zone untrust] user@host# show policy tunnel-traffic { match { source-address local-net； destination-address remote-net； application any； then { permit； } }
A.set policy tunnel-traffic then tunnel remote-vpn
B.set policy tunnel-traffic then permit tunnel remote-vpn
C.set policy tunnel-traffic then tunnel ipsec-vpn remote-vpn permit
D.set policy tunnel-traffic then permit tunnel ipsec-vpn remote-vpn -
多项选择题
Whichtwoconfigurationelementsarerequiredforapolicy-basedVPN？（）
A.IKE gateway
B.secure tunnel interface
C.security policy to permit the IKE traffic
D.security policy referencing the IPsec VPN tunnel -
多项选择题
Whichtwoconfigurationelementsarerequiredforaroute-basedVPN？（）
A.secure tunnel interface
B.security policy to permit the IKE traffic
C.a route for the tunneled transit traffic
D.tunnel policy for transit traffic referencing the IPsec VPN
