Fortinet
FCNSP · Question #117
FCNSP Question #117: Real Exam Question with Answer & Explanation
The correct answer is A. Use two or more route-based IPSec VPN tunnels and enable OSPF on the IPSec virtual interfaces.. See the full explanation below for the reasoning.
Question
A network administrator needs to implement dynamic route redundancy between a FortiGate unit located in a remote office and a FortiGate unit located in the central office. The remote office accesses central resources using IPSec VPN tunnels through two different Internet providers. What is the best method for allowing the remote office access to the resources through the FortiGate unit used at the central office?
Options
- AUse two or more route-based IPSec VPN tunnels and enable OSPF on the IPSec virtual interfaces.
- BUse two or more policy-based IPSec VPN tunnels and enable OSPF on the IPSec virtual interfaces.
- CUse route-based VPNs on the central office FortiGate unit to advertise routes with a dynamic routing protocol
- DDynamic routing protocols cannot be used over IPSec VPN tunnels.
Community Discussion
No community discussion yet for this question.