FCSS_NST_SE-7.4 · Question #101
Refer to the exhibit, which contains the partial output of the get vpn ipsec tunnel details command. Based on the output, which two statements are correct? (Choose two.)
The correct answer is B. The npu_flag for this tunnel is 03. D. Anti-replay is enabled. The output shows "NPU acceleration: encryption (outbound) decryption (inbound)". When both directions are offloaded, FortiOS sets npu_flag to 03. The line replay: enabled confirms that anti‑replay is turned on.
Question
Refer to the exhibit, which contains the partial output of the get vpn ipsec tunnel details command. Based on the output, which two statements are correct? (Choose two.)
Exhibit
Options
- AThe npu_flag for this tunnel is 02.
- BThe npu_flag for this tunnel is 03.
- CDifferent SPI values are a result of auto-negotiation being disabled for phase 2 selectors.
- DAnti-replay is enabled.
How the community answered
(33 responses)- A9% (3)
- B73% (24)
- C18% (6)
Explanation
The output shows "NPU acceleration: encryption (outbound) decryption (inbound)". When both directions are offloaded, FortiOS sets npu_flag to 03. The line replay: enabled confirms that anti‑replay is turned on.
Topics
Community Discussion
No community discussion yet for this question.