Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam NSE7_EFW-7.2 topic 1 question 33 discussion

Actual exam question from Fortinet's NSE7_EFW-7.2
Question #: 33
Topic #: 1
[All NSE7_EFW-7.2 Questions]

Which two statements about ADVPN are true? (Choose two.)

  • A. The hub adds routes based on IKE negotiations.
  • B. You must configure phase 2 quick mode selectors to 0.0.0.0 0.0.0.0.
  • C. All FortiGate devices must be in the same autonomous system (AS).
  • D. You must disable add-route in the hub.
Show Suggested Answer Hide Answer
Suggested Answer: AB 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
charruco
1 week, 4 days ago
Selected Answer: BD
B and D are correct study guide p. 336
upvoted 1 times
...
truserud
3 weeks, 4 days ago
Selected Answer: BD
Correction of my last answer.
upvoted 1 times
...
truserud
3 weeks, 4 days ago
Selected Answer: CD
This is a difficult one, This documentation states that members of an ADVPN must use IBGP - https://community.fortinet.com/t5/FortiGate/Technical-Tip-ADVPN-with-BGP-as-the-routing-protocol/ta-p/192437 , and thus must be in the same AS as answer C states. The hub must also be configured with set add-route disable, so D is definitely correct. The Study Guide merely states that you have to check and confirm that phase2 selectors are set to 0.0.0.0/0, which is the default setting as stated here https://docs.fortinet.com/document/fortigate/7.2.4/cli-reference/373620/config-vpn-ipsec-phase2-interface (dst-subnet row in table). I belive if you HAD to set 0.0.0.0/0 the documentation would actually show that in every configuration example of ADVPN. Thus I am going to say that C and D are the correct answers, just to confuse everyone, because I am a bit confused my self.
upvoted 1 times
...
ac89l
1 month, 2 weeks ago
Selected Answer: BD
and also C is correct
upvoted 1 times
...
5deee77
2 months ago
Selected Answer: BD
study guide p. 336
upvoted 3 times
...
Artbrut
2 months ago
Selected Answer: BD
It's B and D as per study guide p. 336
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...