JN0-1101: Design, Associate (JNCDA)Demo

By Juniper · Question Mode

QuestionQ34

Cloud Infrastructure (NFV and SDN)

You are asked to provide a WAN design proposal to connect multiple customer sites. As part of the design, you intend to use IPsec tunnels to keep traffic private and secure.

Which statement is true about the proposed solution?

  • A IPsec packets can be fragmented once encrypted.
  • B IPsec tunnels will require an MPLS infrastructure through the WAN.
  • C IPsec can require MTU modifications to accommodate the additional overhead.
  • D Packets that are passed through an IPsec tunnel are not encrypted.
Explanation

IPsec encapsulation adds headers and other security overhead, which reduces the effective MTU available for payload traffic. Tunnel MTU or TCP MSS settings may therefore need adjustment to prevent fragmentation. Netgate TNSR: Configuring the IPsec Interface

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!