156-115.77

Review 43 156-115-77 practice questions with answer explanations and community insights.

Question 1

When troubleshooting a VPN site-to-site to a peer, it may be necessary to "down" the tunnel. What is the best method to remove ONLY the tunnel to this peer?

  1. Change the vpn tunnel sharing parameters to force the tunnel down.
  2. Reboot your gateway.
  3. Remove the peer from the community and install policy.
  4. Delete the IKE and IPsec Security Associations using the command vpn tu.

Question 2

Henry is attempting to verify VPN connectivity between two hosts, x and y. Of the following commands, which could be BEST used to verify connectivity of this VPN?

  1. [Expert@HostName]# fw monitor -e "((src=x.x.x.x , dst=y.y.y.y) or (src=y.y.y.y, dst=x.x.x.x)), accept;" x-o /var/log/fw_mon.cap
  2. [Expert@HostName]# fw monitor -e "host(x.x.x.x) and host(y.y.y.y), accept;" -o /var/log/fw_mon.capw monitor -e "accept;" -o /var/log/fw_mon.cap
  3. [Expert@HostName]# fw monitor -e "(ip_p=X) or (ip_p=Y, port(Z)), accept;" -o /var/log/fw_mon.cap
  4. [Expert@HostName]# fw monitor -e "ip_p=X, accept;" -o /var/log/fw_mon.cap

Question 3

Which technology is not supported with route-based VPNs?

  1. Unnumbered VTI
  2. Numbered VTI
  3. IKEv2
  4. OSPF

Question 4

Which feature is not supported with unnumbered VTI?

  1. Proxy interfaces
  2. High availability
  3. Policy based routing
  4. Anti-spoofing

Question 5

In the gateway object, under topology you select the "Get All Members Interfaces with Topology" option and your newly configured unnumbered VTIs are not populated. Why is this information missing?

  1. VTI information on unnumbered interfaces should appear, so there is an issue with your configuration.
  2. VTI information on unnumbered interfaces is not required information for the VPN to work.
  3. VTI information on unnumbered interfaces needs to be entered manually.
  4. In order to fetch VTI information on unnumbered interfaces you must add an explicit rule to the policy.
We are moving to a new platform

CertificationTest is being migrated. Some pages may be slow or briefly unavailable; everything will be back to normal within a few hours. If you run into any issue, email support@certificationtest.net.