Fortinet Exam NSE7_EFW-7.0 Topic 5 Question 28 Discussion

Actual exam question for Fortinet's NSE7_EFW-7.0 exam

Question #: 28
Topic #: 5

Refer to the exhibits.

Which contain the partial configurations of two VPNs on FortiGate.

An administrator has configured two VPNs for two different user groups. Users who are in the Users-2 group are not able to connect to the VPN. After running a diagnostics command, the administrator discovered that FortiGate is not matching the user-2 VPN for members of the Users-2 group.

Which two changes must administrator make to fix the issue? (Choose two.)

AUse different pre-shared keys on both VPNs

BEnable Mode Config on both VPNs.

CSet up specific peer IDs on both VPNs.

DChange to aggressive mode on both VPNs.

Show Suggested Answer

Suggested Answer: C, D

To set peer-id, the VPN must be set in aggressive mode - https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-use-Peer-IDs-to-select-an-IPSec-dialup/ta-p/192292

by Stephen at Mar 16, 2024, 01:54 AM

Limited Time Offer

25%

Off

Get Premium NSE7_EFW-7.0 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Buddy

10 months ago

Setting up specific peer IDs on both VPNs could help in matching the user-2 VPN for Users-2 group.

upvoted 0 times

...

Douglass

11 months ago

I believe enabling Mode Config on both VPNs could also be a solution.

upvoted 0 times

...

Vallie

11 months ago

I agree, using different pre-shared keys might solve the issue.

upvoted 0 times

...

Nancey

11 months ago

I think the administrator should check the pre-shared keys on both VPNs.

upvoted 0 times

...

Diane

11 months ago

Setting up specific peer IDs on both VPNs could help in matching the user-2 VPN for Users-2 group.

upvoted 0 times

...

Detra

12 months ago

I believe enabling Mode Config on both VPNs could also be a solution.

upvoted 0 times

...

Flo

12 months ago

I agree, using different pre-shared keys might solve the issue.

upvoted 0 times

...

Mitzie

1 years ago

I think the administrator should check the pre-shared keys on both VPNs.

upvoted 0 times

...

Joesph

1 years ago

Agreed, C. And enabling Mode Config on both VPNs might help as well. That could ensure the users are getting the correct configuration when they connect.

upvoted 0 times

...

Janine

1 years ago

Personally, I would start by checking the pre-shared keys. Making sure they are different on each VPN sounds like a good first step. And setting up specific peer IDs could also help distinguish between the two VPNs.

upvoted 0 times

...

Kanisha

1 years ago

You're right, A. I'm thinking the administrator might need to take a closer look at the VPN settings. Perhaps the pre-shared keys or the peer IDs are not set up correctly.

upvoted 0 times

...

Tamesha

1 years ago

Hmm, this is an interesting one. The issue seems to be that the FortiGate is not matching the user-2 VPN for the members of the Users-2 group. I wonder if the problem could be with the configuration of the VPN itself.

upvoted 0 times