Exam JN0-633 topic 1 question 55 discussion

Actual exam question from Juniper's JN0-633

Question #: 55
Topic #: 1

You are asked to implement a monitoring feature that periodically verifies that the data plane is working across your IPsec VPN. Which configuration will accomplish this task?

A. [edit security ike] user@srx# show policy policy-1 { mode main; proposal-set standard; pre-shared-key ascii-text "$9$URiqPFnCBIc5QIcylLXUjH"; ## SECRET-DATA } gateway my-gateway { ike-policy policy-1; address 10.10.10.2; dead-peer-detection; external-interface ge-0/0/1; }
B. [edit security ipsec] user@srx# show policy policy-1 { proposal-set standard; } vpn my-vpn { bind-interface st0.0; dead-peer-detection; ike { gateway my-gateway; ipsec-policy policy-1; } establish-tunnels immediately; }
C. [edit security ike] user@srx# show policy policy-1 { mode main; proposal-set standard; pre-shared-key ascii-text "$9$URiqPFnCBIc5QIcylLXUjH"; ## SECRET-DATA } gateway my-gateway { ike-policy policy-1; address 10.10.10.2; vpn-monitor; external-interface ge-0/0/1; }
D. [edit security ipsec] user@srx# show policy policy-1 { proposal-set standard; } vpn my-vpn { bind-interface st0.0; vpn-monitor; ike { gateway my-gateway; ipsec-policy policy-1; } establish-tunnels immediately;

Show Suggested Answer

Suggested Answer: D 🗳️
Reference: https://www.juniper.net/techpubs/en_US/junos11.4/information-products/topic- collections/security/software-all/monitoring-and-troubleshooting/ index.html?topic-59092.html

by lugiricy at April 4, 2025, 7:37 p.m.

Comments

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!