JNCIP-SEC: Juniper Networks Certified Professional – Security (2024) — Question 59

You are using AutoVPN to deploy a hub-and-spoke VPN to connect your enterprise sites.

In this scenario, which two statements are true? (Choose two.)

Answer options

• A. New spoke sites can be added without explicit configuration on the hub.
• B. AutoVPN requires OSPF over IPsec to discover and add new spokes.
• C. All spoke-to-spoke IPsec communication will pass through the hub.
• D. Direct spoke-to-spoke tunnels can be established automatically.

Correct answer: A, D

Explanation

Option A is correct because AutoVPN allows for the automatic addition of new spoke sites without needing to configure the hub manually. Option D is also correct as it enables direct connections between spokes. Options B and C are incorrect; OSPF is not a requirement for AutoVPN, and while spoke-to-spoke communication can be facilitated, it does not have to go through the hub.