Huawei Exam H12-261 Topic 9 Question 90 Discussion

Actual exam question for Huawei's H12-261 exam

Question #: 90
Topic #: 9

Typically, users within a VPN only communicate with other users in the same VPN. They cannot communicate with users on the Internet or access the Internet. Many VPN sites, however, may need to access the Internet. Which of the following statements regarding interconnection between the VPN and the Internet are true?

AThe interconnection between the VPN and the Internet can be implemented on the PE. However, the implementation is complex and may bring security risks. The PE is vulnerable to DoS attacks from the Internet.

BDirectly connect the CE to the Internet on the user side. Each user site can independently access the Internet. That is, a default route destined for the Internet is configured on the CE of each site.

CConfigure the PE to send a default route destined for the Internet to the CE, and add a default route destined for the Internet gateway to the VPN instance routing table.

DIsolating public network routes and VPN routes on the user side is simple, secure, and reliable.

Show Suggested Answer

Suggested Answer: A, C, D

by Vivan at Jun 19, 2024, 09:28 PM

Limited Time Offer

25%

Off

Get Premium H12-261 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rodney

4 months ago

Option A sounds like a security nightmare. The PE being vulnerable to DoS attacks? No thanks, I'll pass on that one.

upvoted 0 times

Tayna

2 months ago

Definitely, security should always be a top concern when setting up a VPN.

upvoted 0 times

...

Chantell

2 months ago

I agree, that doesn't sound like a good idea. We need to prioritize security.

upvoted 0 times

...

Hermila

2 months ago

Option A sounds risky. I wouldn't want the PE to be vulnerable to DoS attacks.

upvoted 0 times

...

Ashley

3 months ago

Yeah, option D sounds like the safest bet. Isolating public network routes and VPN routes sounds like a good idea.

upvoted 0 times

...

Dylan

3 months ago

I think option B might be a better choice. Directly connecting the CE to the Internet seems more secure.

upvoted 0 times

...

Fletcher

3 months ago

Option A sounds risky, I agree. I wouldn't want to deal with potential DoS attacks.

upvoted 0 times

...

Kris

4 months ago

I think option D is the best choice for isolating public network routes and VPN routes.

upvoted 0 times

...

Melina

4 months ago

I prefer option C as it involves configuring the PE to send a default route to the CE.

upvoted 0 times

...

Rachael

4 months ago

Haha, Option D is a bit too good to be true. Isolating public and VPN routes is about as simple as juggling chainsaws.

upvoted 0 times

Lashon

3 months ago

Haha, I agree. Option D does sound a bit too good to be true. Isolating public and VPN routes is definitely not as simple as they make it sound.

upvoted 0 times

...

Stephen

3 months ago

C) Configure the PE to send a default route destined for the Internet to the CE, and add a default route destined for the Internet gateway to the VPN instance routing table.

upvoted 0 times

...

Lilli

3 months ago

B) Directly connect the CE to the Internet on the user side. Each user site can independently access the Internet. That is, a default route destined for the Internet is configured on the CE of each site.

upvoted 0 times

...

Emmanuel

4 months ago

A) The interconnection between the VPN and the Internet can be implemented on the PE. However, the implementation is complex and may bring security risks. The PE is vulnerable to DoS attacks from the Internet.

upvoted 0 times

...