nerdexam
Fortinet

FCP_FGT_AD-7.4 · Question #59

An administrator wants to configure dead peer detection (DPD) on IPsec VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when there is outbound traffic but no…

The correct answer is A. On Demand. The On Demand mode for Dead Peer Detection (DPD) on FortiGate sends DPD probes only when there is outbound traffic and no response from the peer. This mode is used to detect if the peer is still available without continuously sending DPD probes, reducing unnecessary traffic.

VPN

Question

An administrator wants to configure dead peer detection (DPD) on IPsec VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when there is outbound traffic but no response from the peer. Which DPD mode on FortiGate meets this requirement?

Options

  • AOn Demand
  • BOn Idle
  • CDisabled
  • DEnabled

How the community answered

(71 responses)
  • A
    85% (60)
  • B
    4% (3)
  • C
    1% (1)
  • D
    10% (7)

Explanation

The On Demand mode for Dead Peer Detection (DPD) on FortiGate sends DPD probes only when there is outbound traffic and no response from the peer. This mode is used to detect if the peer is still available without continuously sending DPD probes, reducing unnecessary traffic.

Topics

#IPsec VPN#dead peer detection#DPD On Demand#tunnel monitoring

Community Discussion

No community discussion yet for this question.

Full FCP_FGT_AD-7.4 Practice