NSE 7 - Secure Networking 7.6 Architect Exam Materials - Question #22 Discussion

During the last network migration, the IT department discovered that all zero phase selectors in phase 2 IPsec configurations impact network operations. What are two valid recommendations to prevent potential invalid paths during future migrations? (Choose two answers)

• A. Configure routing protocols to specify allowed subnets over the tunnel.
• B. Configure the VPN with the exact segments that will be encrypted in the phase two selectors.
• C. Configure an IP address on the IPsec interface of each firewall to establish unique peer connections and avoid impacting network operations.
• D. Configure an IPsec aggregate to create redundancy between each firewall peer.

Brave-Dump Community Votes