350-701 Endpoint Protection and Detection Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Step 1: Configure IKE policy (Phase 1), Step 2: Set pre-shared key, Step 3: Define interesting traffic via ACL, Step 4: Configure crypto map (binding Phase 2), Step 5: Apply crypto map to interface

  Why this is correct

  This is the correct order because IKE phase 1 parameters must be established first, then authentication keys, then traffic selection, then phase 2 parameters in the crypto map, and finally applied to the interface.

• ✗

  Step 1: Define interesting traffic via ACL, Step 2: Configure IKE policy, Step 3: Set pre-shared key, Step 4: Configure crypto map, Step 5: Apply to interface

  Why it's wrong here

  This is incorrect because the ACL for interesting traffic should be defined after the IKE policy and pre-shared key, as the crypto map references the ACL and the ACL must be created before the crypto map.

• ✗

  Step 1: Configure IKE policy, Step 2: Set pre-shared key, Step 3: Configure crypto map, Step 4: Define interesting traffic ACL, Step 5: Apply to interface

  Why it's wrong here

  This is incorrect because the crypto map requires the ACL to be defined first; otherwise, the crypto map cannot reference the traffic selector. The ACL must come before the crypto map.

• ✗

  Step 1: Configure IKE policy, Step 2: Set pre-shared key, Step 3: Define interesting traffic ACL, Step 4: Apply crypto map to interface, Step 5: Configure crypto map

  Why it's wrong here

  This is incorrect because the crypto map must be configured before it can be applied to the interface. Applying an undefined crypto map would fail.

Go deeper

Related to this question