A.IKE gatewayB.secure tunnel interfaceC.security policy……

多项选择题Whichtwoconfigurationelementsarerequiredforaroute-basedVPN？（）

A.secure tunnel interface
B.security policy to permit the IKE traffic
C.a route for the tunneled transit traffic
D.tunnel policy for transit traffic referencing the IPsec VPN

单项选择题Regardingaroute-basedversuspolicy-basedIPsecVPN，whichstatementistrue？（）

A.A route-based VPN generally uses less resources than a policy-based VPN.
B.A route-based VPN cannot have a deny action in a policy； a policy-based VPN can have a deny action.
C.A route-based VPN is better suited for dialup or remote access compared to a policy-based VPN.
D.A route-based VPN uses a policy referencing the IPsec VPN； a policy-based VPN policy does not use apolicy referencing the IPsec VPN

单项选择题Apolicy-basedIPsecVPNisidealforwhichscenario？（）

A.when you want to conserve tunnel resources
B.when the remote peer is a dialup or remote access client
C.when you want to configure a tunnel policy with an action of deny
D.when a dynamic routing protocol such as OSPF must be sent across the VPN

单项选择题Aroute-basedVPNisrequiredforwhichscenario？（）

A.when the remote VPN peer is behind a NAT device
B.when multiple networks need to be reached across the tunnel and GRE cannot be used
C.when the remote VPN peer is a dialup or remote access client
D.when a dynamic routing protocol is required across the VPN and GRE cannot be used

单项选择题WhichattributeisoptionalforIKEphase2negotiations？（）

A.proxy-ID
B.phase 2 proposal
C.Diffie-Hellman group key
D.security protocol （ESP or AH）