Câu 54: JN0-633: Juniper Networks Certified Professional Security (JNCIP-SEC)

You are asked to implement a monitoring feature that periodically verifies that the data plane is working across your IPsec VPN. Which configuration will accomplish this task?

1. A. [edit security ike] user@srx# show policy policy-1 { mode main; proposal-set standard; pre-shared-key ascii-text "$9$URiqPFnCBIc5QIcylLXUjH"; ## SECRET-DATA } gateway my-gateway { ike-policy policy-1; address 10.10.10.2; dead-peer-detection; external-interface ge-0/0/1; }
2. B. [edit security ipsec] user@srx# show policy policy-1 { proposal-set standard; } vpn my-vpn { bind-interface st0.0; dead-peer-detection; ike { gateway my-gateway; ipsec-policy policy-1; } establish-tunnels immediately; }
3. C. [edit security ike] user@srx# show policy policy-1 { mode main; proposal-set standard; pre-shared-key ascii-text "$9$URiqPFnCBIc5QIcylLXUjH"; ## SECRET-DATA } gateway my-gateway { ike-policy policy-1; address 10.10.10.2; vpn-monitor; external-interface ge-0/0/1; }
4. D. [edit security ipsec] user@srx# show policy policy-1 { proposal-set standard; } vpn my-vpn { bind-interface st0.0; vpn-monitor; ike { gateway my-gateway; ipsec-policy policy-1; } establish-tunnels immediately; — đáp án hiện tại