nerdexam
Fortinet

NSE7_EFW-7.2 · Question #86

Which two configurations are mandatory for an auto-discovery VPN (ADVPN) implementation on a hub? (Choose two.)

The correct answer is B. set net-device must be disabled to avoid dynamic interface creation. D. An overlay IP address with a mask of /32 must be assigned to the IPsec virtual interface. See the full explanation below for the reasoning.

Question

Which two configurations are mandatory for an auto-discovery VPN (ADVPN) implementation on a hub? (Choose two.)

Options

  • AThe remote-ip must be on a different IP address from the overlay subnet.
  • Bset net-device must be disabled to avoid dynamic interface creation.
  • Cset add-route must be enabled to add routes.
  • DAn overlay IP address with a mask of /32 must be assigned to the IPsec virtual interface.

How the community answered

(41 responses)
  • A
    7% (3)
  • B
    80% (33)
  • C
    12% (5)

Community Discussion

No community discussion yet for this question.

Full NSE7_EFW-7.2 Practice