nerdexam
Fortinet

FCSS_EFW_AD-7.4 · Question #76

Which two configurations are mandatory for an auto-discovery VPN (ADVPN) implementation on a hub? (Choose two.)

The correct answer is B. set net-device must be disabled to avoid dynamic interface creation. D. An overlay IP address with a mask of /32 must be assigned to the IPsec virtual interface. See the full explanation below for the reasoning.

Question

Which two configurations are mandatory for an auto-discovery VPN (ADVPN) implementation on a hub? (Choose two.)

Options

  • AThe remote-ip must be on a different IP address from the overlay subnet.
  • Bset net-device must be disabled to avoid dynamic interface creation.
  • Cset add-route must be enabled to add routes.
  • DAn overlay IP address with a mask of /32 must be assigned to the IPsec virtual interface.

How the community answered

(58 responses)
  • A
    19% (11)
  • B
    74% (43)
  • C
    7% (4)

Community Discussion

No community discussion yet for this question.

Full FCSS_EFW_AD-7.4 Practice