Which of the following are purposes of NAT traversal in IPsec? (Choose two.)

• A.To detect intermediary NAT devices in the tunnel path.
• B.To dynamically change phase 1 negotiation mode aggressive mode.
• C.To encapsulation ESP packets in UDP packets using port 4500.
• D.To force a new DH exchange with each phase 2 rekey.

Comment: *

Name: *

Email: *

Verification: *

Examine the network diagram shown in the exhibit, then answer the following question:

Which one of the following routes is the best candidate route for FGT1 to route traffic from the Workstation to the Web server?

• A.10.4.200.0/30 is directly connected, port2
• B.172.16.0.0/16 [50/0] via 10.4.200.2, port2 [5/0]
• C.0.0.0.0/0 [20/0] via 10.4.200.2, port2
• D.172.16.32.0/24 is directly connected, port1

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Which contains a session list output. Based on the information shown in the exhibit, which statement is true?

• A.Destination NAT is disabled in the firewall policy.
• B.One-to-one NAT IP pool is used in the firewall policy.
• C.Overload NAT IP pool is used in the firewall policy.
• D.Port block allocation IP pool is used in the firewall policy.

Comment: *

Name: *

Email: *

Verification: *

Which statements are true regarding firewall policy NAT using the outgoing interface IP address with fixed port disabled? (Choose two.)

• A.Connections are tracked using source port and source MAC address.
• B.Port address translation is not used.
• C.Source IP is translated to the outgoing interface IP.
• D.This is known as many-to-one NAT.

Comment: *

Name: *

Email: *

Verification: *

If the Issuer and Subject values are the same in a digital certificate, which type of entity was the certificate issued to?

• A.A subordinate CA
• B.A CRL
• C.A person
• D.A root CA

Comment: *

Name: *

Email: *

Verification: *