Exam NSE7_EFW-7.2 topic 1 question 51 discussion

Actual exam question from Fortinet's NSE7_EFW-7.2

Question #: 51
Topic #: 1

Refer to the exhibit, which shows a network diagram.

Which IPSec phase 2 configuration should you implement so that only one remote site is connected at any time?

A. Set net-device to enable.
B. Set route-overlap to allow.
C. Set single-source to enable.
D. Set route-overlap to either use-new or use-old.

Show Suggested Answer

Suggested Answer: D 🗳️

by dsticht at May 29, 2024, 4:18 p.m.

Comments

Submit Cancel

myrmidon3

4 months, 2 weeks ago

Selected Answer: D

route-overlap settings and their behavior: use-new (default): Disconnects the existing VPN and accepts the new one. use-old: Keeps the existing VPN and rejects the new connection. allow: Keeps both VPNs and allows traffic balancing between them using ECMP (Equal-Cost Multi-Path). Answer in context: If the goal is to ensure that only one remote site is connected at a time, the most appropriate configuration would be to use use-new or use-old.

upvoted 1 times

...