JNCIA-SEC: Juniper Networks Certified Associate – Security (2021) — Question 30

You want to verify the peer before IPsec tunnel establishment.

What would be used as a final check in this scenario?

Answer options

• A. traffic selector
• B. perfect forward secrecy
• C. st0 interfaces
• D. proxy ID

Correct answer: C

Explanation

The correct answer is C, as st0 interfaces are specifically designed for IPsec tunnels and serve as the last check for peer verification. Options A, B, and D, while related to IPsec, do not specifically function as a final verification step for the peer before tunnel establishment.