• Description:FWV, Associate (JNCIA-FWV)
• Passing Score:0%
• Practice Test - Number of questions:106 questions
• Simulation Test - Number of questions:106 questions
• Simulation Test Duration:120 minutes
• Has explanations:No

You have created your tunnel interface in the untrust zone. Traffic from the trust zone is able to enter the tunnel and pass to the destination. However traffic from a different interface in the untrust zone is not able to pass traffic through the tunnel. You are using a single virtual router. What is causing this problem?

Answer(s)

1. Two virtual routers need to be configured.
2. A policy is needed since intra-zone blocking is on by default in the untrust zone.
3. The tunnel is configured with a proxy id that does not include the address from the untrustinterface.
4. The routing tables are not correctly configured to allow the traffic from the untrust source to bedelivered to the destination.

A policy is needed since intra-zone blocking is on by default in the untrust zone.