ExamTopics Logo
Mail Us[email protected]
Menu
Juniper Discussions
exam questions

Exam JN0-1330 All Questions

View all questions & answers for the JN0-1330 exam
Go to Exam

Exam JN0-1330 topic 1 question 20 discussion

Actual exam question from Juniper's JN0-1330
Question #: 20
Topic #: 1
[All JN0-1330 Questions]

What is one way to increase the security of a site-to-site IPsec VPN tunnel?

  • A. Implement a stronger Diffie-Hellman group.
  • B. Change IKE Phase 1 from main mode to aggressive mode.
  • C. Implement traffic selectors.
  • D. Implement a policy-based VPN.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by Babai at Oct. 6, 2020, 8:50 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
kumaravinash92
4 years, 4 months ago
With diffie-hellman, no doubt vpn would be more secure, but more cpu consumption also.
upvoted 1 times
...
kumaravinash92
4 years, 4 months ago
A traffic selector (also known as a proxy ID in IKEv1), is an agreement between IKE peers to permit traffic through a tunnel if the traffic matches a specified pair of local and remote addresses. Only traffic that conforms to a traffic selector is permitted through the associated IPSec SA.
upvoted 1 times
...
snehan
4 years, 6 months ago
This is incorrect. It should be the implementation of a stronger DH group.
upvoted 1 times
...
Babai
4 years, 6 months ago
Shouldn't it be A. Implement a stronger Diffie-Hellman group ?
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago