Exam JN0-635 topic 1 question 34 discussion

Actual exam question from Juniper's JN0-635

Question #: 34
Topic #: 1

Click the Exhibit button.

Your company has purchased a competitor and now must connect the new network to the existing one. The competitor's gateway device is receiving its ISP address using DHCP. Communication between the two sites must be secured; however, obtaining a static public IP address for the new site gateway is not an option at this time. The company has several requirements for this solution:
✑ A site-to-site IPsec VPN must be used to secure traffic between the two sites;
✑ The IKE identity on the new site gateway device must use the hostname option; and
✑ Internet traffic from each site should exit through its local Internet connection.
The configuration shown in the exhibit has been applied to the new site's SRX, but the secure tunnel is not working.
In this scenario, what configuration change is needed for the tunnel to come up?

A. Remove the quotes around the hostname
B. Bind interface st0 to the gateway
C. Change the IKE policy mode to aggressive
D. Apply a static address to ge-0/0/2

Show Suggested Answer

Suggested Answer: A 🗳️

by Johnny22fernandez at May 8, 2021, 2:54 a.m.

Comments

Submit Cancel

danser365

Highly Voted 1 year ago

C is the correct option. The quotes at hostname are generated by the system.

upvoted 8 times

...

Johnny22fernandez

Highly Voted 1 year, 2 months ago

Using agressive would be another solution

upvoted 7 times

...

joseph267

Most Recent 3 months, 1 week ago

I'm a JTAC engineer C is the correct option

upvoted 4 times

...

Ajjc2021

9 months, 2 weeks ago

Advance IPSec. with dynamic gateway. Must have Mode Aggressive. If it was remove quotes, it will show double-quote each end. C is the correct answer