StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Security · Security | Secure Windows Server operating system

Practice question 336 of 506 · medium

Traffic works with ordinary firewall allows but fails after IPsec is set to Require. What should be inspected next?

Choose the single best answer.

  1. A.Only broaden the firewall rule's remote-address scope
  2. B.Only add another identical TCP allow rule
  3. C.Peer authentication, trusted certificates if used, compatible proposals, and active security associations
  4. D.Only change the rule from Domain to all profiles while leaving failed negotiation unchanged
Show the answer and explanation

✓ Correct answer

  • Peer authentication, trusted certificates if used, compatible proposals, and active security associations

Required IPsec depends on compatible authentication and negotiation with active associations. Duplicate traffic allows or broader address/profile scopes do not satisfy a missing required security negotiation.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.