H12-725_V4.0

H12-725_V4.0 practice questions, page 4 of 5, with answer review and explanations.

Question 16

AH integrity check involves the hash calculation for IP packets including the IP address, whereas, NAT changes the IP address and causes the hash value change. Therefore, packets on the IPsec tunnel that has AH enabled cannot traverse a NAT device.

  1. TRUE
  2. FALSE

Question 17

As shown in the figure, the NAT policy configuration on the firewall is as follows: [FW-policy-nat]display this nat-policy rule name no-nat source-zone trust destination-zone untrust source-address 10.1.2.0 mask 255.255.255.0 action no-nat rule name nat source-zone trust destination-zone untrust action source-nat easy-ip If other configurations are correct, the IPsec VPN service can be accessed normally.

  1. TRUE
  2. FALSE

Question 18

Which of the following is not a feature of ESP?

  1. Data integrity
  2. Data availability
  3. Data encryption
  4. Data origin authentication

Question 19

Which of the following are Dead Peer Detection (DPD) modes? (Choose all that apply.)

  1. Periodic
  2. Shared
  3. On-demand
  4. Exclusive

Question 20

When gateways are connected using GRE over IPsec, the IPsec encapsulation mode must be tunnel mode.

  1. TRUE
  2. FALSE