nerdexam
Fortinet

NSE4_FGT-7.0 · Question #4

Which statements best describe auto discovery VPN (ADVPN). (Choose two.)

The correct answer is A. It requires the use of dynamic routing protocols so that spokes can learn the routes to other C. Tunnels are negotiated dynamically between spokes. Auto Discovery VPN (ADVPN) enables spokes to dynamically negotiate direct tunnels between themselves and relies on dynamic routing protocols for route propagation among spokes.

VPN

Question

Which statements best describe auto discovery VPN (ADVPN). (Choose two.)

Options

  • AIt requires the use of dynamic routing protocols so that spokes can learn the routes to other
  • BADVPN is only supported with IKEv2.
  • CTunnels are negotiated dynamically between spokes.
  • DEvery spoke requires a static tunnel to be configured to other spokes so that phase 1 and phase

How the community answered

(30 responses)
  • A
    90% (27)
  • B
    3% (1)
  • D
    7% (2)

Why each option

Auto Discovery VPN (ADVPN) enables spokes to dynamically negotiate direct tunnels between themselves and relies on dynamic routing protocols for route propagation among spokes.

AIt requires the use of dynamic routing protocols so that spokes can learn the routes to otherCorrect

ADVPN requires dynamic routing protocols, such as BGP or OSPF, to allow spokes to learn routes to other spokes via the hub, facilitating the establishment of direct spoke-to-spoke tunnels.

BADVPN is only supported with IKEv2.

While FortiGate's ADVPN implementation primarily relies on IKEv2, the statement implies a universal restriction that may not apply to all ADVPN concepts or implementations across different vendors, making it not a universally best descriptive feature.

CTunnels are negotiated dynamically between spokes.Correct

A core feature of ADVPN is its ability to dynamically negotiate and establish direct VPN tunnels between spokes, optimizing traffic flow by eliminating the need for traffic to traverse the hub after initial discovery.

DEvery spoke requires a static tunnel to be configured to other spokes so that phase 1 and phase

ADVPN's primary purpose is to eliminate the need for manually configured static tunnels between every spoke, instead establishing them dynamically as needed.

Concept tested: FortiGate Auto Discovery VPN features

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/469904/auto-discovery-vpn-advpn

Topics

#ADVPN#IPsec VPN#dynamic routing#IKEv2

Community Discussion

No community discussion yet for this question.

Full NSE4_FGT-7.0 Practice