A site-to-site IPsec VPN between a head office in Kigali and a branch in Rusizi will not come up after a new firewall is installed at the branch. What must the firewall allow?
Un VPN IPsec de site à site entre un siège à Kigali et une agence à Rusizi ne s'établit plus depuis l'installation d'un nouveau pare-feu à l'agence. Que doit autoriser le pare-feu ?
Answers
ATCP 443 and TCP 80, the same as ordinary web browsingTCP 443 et TCP 80, comme pour la navigation web ordinaire
BUDP 500 (IKE), UDP 4500 (NAT-T) and ESP, IP protocol 50UDP 500 (IKE), UDP 4500 (NAT-T) et ESP, protocole IP 50
CTCP 1723 together with GRE, as used by older remote VPN linksTCP 1723 avec GRE, comme les anciennes liaisons VPN d'accès distant
DUDP 1194 only, the default port of every VPN productUDP 1194 uniquement, le port par défaut de tous les VPN
The answer and explanation are in the full bank.
This question is one of 2,831 in the paid banks. Each comes with the correct answer and the reasoning behind it, not just a mark.
Unlock for 5,000 RWFMIFOTRA exam practicealigned to Practice set: Ports and Protocols·3 marks·Hard
More Networking questions
- A wireless mesh network spans a large warehouse. If one access point fails, data is automatically rerouted through another path. This self-healing nature is characteristic of what topology?
- You are tasked with connecting two office buildings across a city spanning 15 miles. Which network type best fits this deployment?
- A hospital requires dedicated high-speed fiber channels to connect its database servers directly to storage arrays. What network type is being utilized?
- An employee pairs their Bluetooth headphones to their smartphone. What type of network does this pairing establish?
- A university interconnects multiple LANs across its academic buildings using a unified administration domain. This best describes a...
- Your company leases a dedicated MPLS circuit from an ISP to connect headquarters in New York to a branch in Tokyo. What network type is this?
- A system administrator needs to allocate IP addresses for a subnet that requires 14 hosts. Which CIDR notation provides exactly enough addresses without excessive waste?
- An engineer configures a branch router with IP 10.10.10.130/26. What is the broadcast address for this specific subnet?