Fortinet
NSE7_SDW-6.4 · Question #46
Refer to the exhibit. Which statement is correct it the responder FortiGate is using a dynamic routing protocol over the IPsec VPN interface?
The correct answer is C. Add-route must be enabled to prevent FortiGate from installing VPN static routes. See the full explanation below for the reasoning.
Question
Refer to the exhibit. Which statement is correct it the responder FortiGate is using a dynamic routing protocol over the IPsec VPN interface?
Options
- AThe phase 1 type must be changed to static for dynamic routing
- BOnly dial-up connections without XAuth can be used for the dynamic routing
- CAdd-route must be enabled to prevent FortiGate from installing VPN static routes
- DPeergroup must be set to accept only one peer ID for a unique VPN interface
How the community answered
(18 responses)- A17% (3)
- B6% (1)
- C72% (13)
- D6% (1)
Community Discussion
No community discussion yet for this question.