Refer to the Exhibit.
You are asked to configure a hub-and-spoke VPN. All the VPN components have been
configured, and you are able to ping the remote tunnel interfaces at Site 1 and Site 2 from the Hub
site as shown in the exhibit. The Hub site’s external interface is in security zone untrust and the
st0 interfaces from each site are in security zone DMZ. Users in Site 2 are unable to connect to a
Web server in Site 1.
Which additional step is required at the hub site for users to access the Web server?
A.
Configure a VPN between Site 1 and Site 2.
B.
Configure a policy in the untrust zone that allows traffic between the sites.
C.
Configure a policy in the VPN zone that allows traffic between the sites.
D.
Configure a policy between the VPN and untrust zones.