Exit JN0-333 Security, Specialist (JNCIS-SEC)
Question 4 of 5
0% complete
Q4 Multiple choice

You recently configured an IPsec VPN between two SRX Series devices. You notice that the Phase1 negotiation succeeds and the Phase 2 negotiation fails.

Which two configuration parameters should you verify are correct? (Choose two.)

Select all that apply.

  • A

    Verify that the IKE gateway proposals on the initiator and responder are the same.

  • B

    Verify that the VPN tunnel configuration references the correct IKE gateway.

  • C

    Verify that the IKE initiator is configured for main mode.

  • D

    Verify that the IPsec policy references the correct IKE proposals.