when you want to conserve tunnel resources
when the remote peer is a dialup or remote access client
when you want to configure a tunnel policy with an action of deny
when a dynamic routing protocol such as OSPF must be sent across the VPN
第1题：
You need to configure a GRE tunnel on a IPSec router. When you are using the SDM to configurea GRE tunnel over IPsec， which two parameters are required when defining the tunnel interfaceinformation？（）
第2题：
A route-based VPN is required for which scenario? （）
第3题：
A. When you want all unauthenticated traffic to be redirected
B. When you want all clear text traffic to be redirected.
C. When you want all authenticated traffic to be redirected.
D. When you want all encrypted traffic to be redirected.
第4题：
A route-based VPN is required for which scenario？（）
第5题：
Which command is needed to change this policy to a tunnel policy for a policy-based VPN？（） [edit security policies from-zone trust to-zone untrust] user@host# show policy tunnel-traffic { match { source-address local-net； destination-address remote-net； application any； then { permit； } }
第6题：
When using the Cisco SDM Quick Setup Siteto-Site VPN wizard， which three parameters do you configure？（）
第7题：
A policy-based IPsec VPN is ideal for which scenario？（）
第8题：
A. when the remote VPN peer is behind a NAT device
B. when multiple networks need to be reached across the tunnel
C. when the remote VPN peer is a dialup or remote access client
D. when a dynamic routing protocol such as OSPF is required across the VPN
第9题：
Regarding a route-based versus policy-based IPsec VPN， which statement is true？（）
第10题：
You are configuring captive portal on your SRX Series device for guest user access.When would you use the redirect-traffic all command?（）