Fortinet
NSE4 · Question #305
You are tasked to architect a new IPsec deployment with the following criteria: - There are two HQ sites that all satellite offices must connect to. - The satellite offices do not need to communicate
Sign in or unlock NSE4 to reveal the answer and full explanation for question #305. The question stem and answer options stay visible for context.
Submitted by kim_seoul· Apr 18, 2026VPN and Routing
Question
You are tasked to architect a new IPsec deployment with the following criteria:
- There are two HQ sites that all satellite offices must connect to.
- The satellite offices do not need to communicate directly with other
satellite offices.
- No dynamic routing will be used.
- The design should minimize the number of tunnels being configured.
Which topology should be used to satisfy all of the requirements?
Options
- ARedundant
- BHub-and-spoke
- CPartial mesh
- DFully meshed
Unlock NSE4 to see the answer
You've previewed enough free NSE4 questions. Unlock NSE4 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#IPsec VPN#VPN Topologies#Hub-and-Spoke#Network Design