JNCIA-SEC: Juniper Networks Certified Associate – Security (2021) — Question 76

Which two IKE Phase 1 configuration options must match on both peers to successfully establish a tunnel? (Choose two.)

Answer options

• A. VPN name
• B. gateway interfaces
• C. IKE mode
• D. Diffie-Hellman group

Correct answer: C, D

Explanation

The IKE mode and the Diffie-Hellman group must match on both peers as they are critical for establishing a secure communication channel. The VPN name and gateway interfaces can differ without affecting the tunnel establishment process.