A site-to-site virtual private network (VPN) can be fully configured on one firewall, with no corresponding peer configuration needed.

### Why this is right The statement is false because both peer firewalls need compatible settings and correct peer information. A mismatch on either side can prevent negotiation or traffic flow. ### The concept A site-to-site VPN is a relationship between two firewalls. Each side identifies the other peer and uses compatible Internet Key Exchange and IPsec settings. Both sides also need appropriate tunnel interfaces, routes, and security rules. Configuring just one side does not establish the complete connection. ### The other options - **True**: this would be true only if the statement said both firewalls require compatible configuration; one firewall cannot supply the peer's configuration. ### Terms - **VPN**: Virtual Private Network. A protected connection between networks. - **IPsec**: Internet Protocol Security. A suite of protocols used to protect network traffic. ### Remember A site-to-site tunnel has two endpoints, so check both configurations.