Exam NSE7_SDW-7.2 topic 1 question 18 discussion

Recommended templates will allow you to prepare a template for IPsec tunnels using Fortinet recommended settings for phase1 and phase2 parameters. • The IPsec_Fortinet_Recommended template defines a template for a static point-to-point tunnel • The BRANCH_IPsec_Recommended template defines a template for a static tunnel (with a known remote IP address) • The HUB_IPsec_Recommended template defines a template for a dynamic tunnel (an IPsec hub for dial-up tunnels)

A: Hub IPSEC template is a template that creates dynamic ipsec VPN with OI, PSK, and IP range. B: Does not exists, its to throw you off with the term static. C: IPSEC fortinet recommended template defines a static point to point tunnel. D: correct, branch IPSEC defines a template for a static tunnel. Think branch as in branch locations.

"The HUB_IPsec_Recommended template defines a template for a dynamic tunnel"

branch ipsec recommended is the template correct

D is correct

D is correct. See page 59 in the 7.2 Study Guide which explains that Branch_ipsec_recommended is what defines a template for a STATIC tunnel.

D is correct. Page 58 stududy guide 7.2 For Static tunnel is The BRANCH_IPsec_Recommended template defines a template for a static tunnel (with a known remote IP address)

According Study Guide 7.2 page 59: The Branch_IPsec_Recommended template defines a template for a static tunnel

D Dynamic tunnels on hub Static tunnels on spokes

A is correct

Should be D.... Question says: "to configure static tunnels for a hub and spoke topology" According Study Guide 7.2 page 59: The Branch_IPsec_Recommended template defines a template for a static tunnel

A is correct. Refer to below link https://docs.fortinet.com/document/fortimanager/7.4.2/administration-guide/959026/recommended-ipsec-templates

HUB_IPSec_Recommended - Fortinet's recommended template for hub IPSec tunnels. Branch_IPSec_Recommended - Fortinet's recommended template for IPSec branch device configurations. IPSec_Fortinet_ Recommended - Fortinet's recommended template for IPSec configurations.This template is not used for SD-WAN configuration.