NSE7_EFW Question 77

Question

Refer to the exhibit. A partial VPN configuration is shown. Which statement about this VPN IPsec phase 1 configuration is correct?
A. FortiGate will not add a route to its routing information base (RIB) or forwarding information base (FIB) when the dynamic tunnel is negotiated.
B. This configuration must include certificates associated peer IDs to enhance security.
C. A separate interface is created for each dial-up tunnel, which can be slower and more resource intensive, especially in large networks.
D. This configuration is the best for networks with regular traffic intervals, providing a balance between connectivity assurance and resource utilization.

Accepted Answer

Marked answer: D. This configuration is the best for networks with regular traffic intervals, providing a balance between connectivity assurance and resource utilization.

NSE7_EFW Question 77

Community Discussion

Preparing Practice Exam…

NSE7_EFW Question 77

Community Discussion