Fortinet
NSE8_812 · Question #123
NSE8_812 Question #123: Real Exam Question with Answer & Explanation
Sign in or unlock NSE8_812 to reveal the answer and full explanation for question #123. The question stem and answer options stay visible for context.
Question
The FortiGate is used as an IPsec gateway at a branch office. Two tunnels, tunA and tunB, are established between this FortiGate and the headquarters' IPsec gateway. The branch office's subnet is 10.1.1.0/24. The headquarters' subnet is 10.2.2.0/24.
The desired usage for tunA and tunB has been defined as follows:
- sessions initiated from 10.1.1.0/24 to 10.2.2.0/24 must be routed out over tunA when tunA is up
- sessions initiated from 10.1.1.0/24 to 10.2.2.0/24 have to be routed out over tunB when tunA is down
- sessions initiated from 10.2.2.0/24 can ingress either on tunA or on tunB
Options
- Aconfig router static edit 1 set dst 10.2.2.0 255.255.255.0 set distance 10 set device "tunA" next edit 2 set dst 10.2.2.0 255.255.255.0 set distance 20 set device "tunB" next end
- Bconfig router static edit 1 set dst 10.2.2.0 255.255.255.0 set distance 10 set priority 5 set device "tunA" next edit 2 set dst 10.2.2.0 255.255.255.0 set distance 10 set priority 10 set device "tunB" next end
- Cconfig router static edit 1 set dst 10.2.2.0 255.255.255.0 set distance 10 set weight 20 set device "tunA" next edit 2 set dst 10.2.2.0 255.255.255.0 set distance 10 set weight 10 set device "tunB" next end
- Dconfig router static edit 1 set dst 10.2.2.0 255.255.255.0 set distance 10 set device "tunA" next edit 2 set dst 10.2.2.0 255.255.255.0 set distance 10 set device "tunB" next end
Unlock NSE8_812 to see the answer
You've previewed enough free NSE8_812 questions. Unlock NSE8_812 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.