Fortinet Exam NSE7_EFW-7.2 Topic 4 Question 16 Discussion

Actual exam question for Fortinet's NSE7_EFW-7.2 exam

Question #: 16
Topic #: 4

[All NSE7_EFW-7.2 Questions]

Exhibit.

Refer to the exhibit, which contains a partial VPN configuration.

What can you conclude from this configuration1?

AFortiGate creates separate virtual interfaces for each dial up client.

BThe VPN should use the dynamic routing protocol to exchange routing information Through the tunnels.

CDead peer detection s disabled.

DThe routing table shows a single IPSec virtual interface.

Show Suggested Answer

Suggested Answer: B, D

The neighbor-group command in FortiOS allows for the application of common settings to a group of neighbors in OSPF, and can also be used to simplify configuration by applying common settings to both IBGP and EBGP neighbors. This grouping functionality is a part of the FortiOS CLI and is documented in the Fortinet CLI reference.

by Salley at Jun 23, 2024, 02:26 AM

Limited Time Offer

25%

Off

Get Premium NSE7_EFW-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Mariko

12 days ago

Hah, dead peer detection disabled? That's a classic trap answer. I'm going with D, the routing table shows a single IPSec virtual interface. Keeping it simple is usually the way to go.

upvoted 0 times

...

Martin

15 days ago

Hold on, I'm not so sure. The configuration seems a bit complex. Maybe it's B - the VPN should use a dynamic routing protocol to exchange routing information through the tunnels. That would make sense for a more advanced setup.

upvoted 0 times

...

Taryn

19 days ago

Ah, classic VPN configuration questions. I bet the answer is D - the routing table shows a single IPSec virtual interface. That's the most straightforward conclusion from the exhibit.

upvoted 0 times

26 days ago

I think the answer is A) FortiGate creates separate virtual interfaces for each dial up client.

upvoted 0 times

...