What are three benefits of using chassis clustering？（）

单项选择题Regardingsecuretunnel（st）interfaces，whichstatementistrue？（）

A.You cannot assign st interfaces to a security zone.
B.You cannot apply static NAT on an st interface logical unit.
C.st interfaces are optional when configuring a route-based VPN
D.A static route can reference the st interface logical unit as the next-hop

单项选择题Which command is needed to change this policy to a tunnel policy for a policy-based VPN？（） [edit security policies from-zone trust to-zone untrust] user@host# show policy tunnel-traffic { match { source-address local-net； destination-address remote-net； application any； then { permit； } }

A.set policy tunnel-traffic then tunnel remote-vpn
B.set policy tunnel-traffic then permit tunnel remote-vpn
C.set policy tunnel-traffic then tunnel ipsec-vpn remote-vpn permit
D.set policy tunnel-traffic then permit tunnel ipsec-vpn remote-vpn

多项选择题Whichtwoconfigurationelementsarerequiredforapolicy-basedVPN？（）

A.IKE gateway
B.secure tunnel interface
C.security policy to permit the IKE traffic
D.security policy referencing the IPsec VPN tunnel

多项选择题Whichtwoconfigurationelementsarerequiredforaroute-basedVPN？（）

A.secure tunnel interface
B.security policy to permit the IKE traffic
C.a route for the tunneled transit traffic
D.tunnel policy for transit traffic referencing the IPsec VPN

单项选择题Regardingaroute-basedversuspolicy-basedIPsecVPN，whichstatementistrue？（）

A.A route-based VPN generally uses less resources than a policy-based VPN.
B.A route-based VPN cannot have a deny action in a policy； a policy-based VPN can have a deny action.
C.A route-based VPN is better suited for dialup or remote access compared to a policy-based VPN.
D.A route-based VPN uses a policy referencing the IPsec VPN； a policy-based VPN policy does not use apolicy referencing the IPsec VPN