200-901: Automating Networks Using Cisco PlatformsDemo

Question

Question Image

Refer to the exhibit. Store employees require remote access to the store network from anywhere on the Internet. To accomplish this, network engineers configure a VPN using IPsec tunnel mode. They want to minimize the configuration needed to deploy and manage the solution. On which local device must the VPN terminate?

A switch
B firewall
C PC
D router

Explanation

An IPsec remote-access VPN should terminate at the Internet-facing firewall. The firewall is the network perimeter device, allowing it to decrypt and authenticate VPN traffic and apply security policies before the traffic enters the internal network. This avoids the additional forwarding and access-rule configuration that would be needed if the VPN terminated farther inside the network.

Learn more

Cisco Secure Firewall Remote Access VPN configuration

200-901: Automating Networks Using Cisco PlatformsDemo

AstroTutor

Notes

Readiness

QuestionQ508

Community Discussion