Which three security concerns can be addressed by a tunnel mode IPsec VPN secured by AH？（）

多项选择题WhichthreesecurityconcernscanbeaddressedbyatunnelmodeIPsecVPNsecuredbyESP？（）

A.data integrity
B.data confidentiality
C.data authentication
D.outer IP header confidentiality
E.outer IP header authentication

多项选择题YouarecreatingadestinationNATrule-set.Whichtwoarevalidforusewiththefromclause？（）

A.security policy
B.interface
C.routing-instance
D.IP address

单项选择题WhichstatementistrueaboutaNATruleactionofoff？（）

A.The NAT action of off is only supported for destination NAT rule-sets.
B.The NAT action of off is only supported for source NAT rule-sets.
C.The NAT action of off is useful for detailed control of NAT
D.The NAT action of off is useful for disabling NAT when a pool is exhausted.

单项选择题Which type of source NAT is configured in the exhibit？（） [edit security nat destination] user@host# show pool A { address 10.1.10.5 32； } rule-set 1 { from zone untrust； rule 1A { match { destination-address 100.0.0.1 32； } then { destination-nat pool A； } } }

A.static destination NAT
B.static source NAT
C.pool-based destination NAT without PAT
D.pool-based destination NAT with PAT

单项选择题Which type of source NAT is configured in the exhibit？（） [edit security nat source] user@host# show rule-set 1 { from interface ge-0 0 2.0； to zone untrust； rule 1A {match { destination-address 1.1.70.0 24； } then { source-nat interface； } } }

A.interface-based source NAT
B.static source NAT
C.pool-based source NAT with PAT
D.pool-based source NAT without PAT