exam questions

Exam NSE7_EFW-7.2 All Questions

View all questions & answers for the NSE7_EFW-7.2 exam

Exam NSE7_EFW-7.2 topic 1 question 60 discussion

Actual exam question from Fortinet's NSE7_EFW-7.2
Question #: 60
Topic #: 1
[All NSE7_EFW-7.2 Questions]

Which two configurations are mandatory for an auto-discovery VPN (ADVPN) implementation on a hub? (Choose two.)

  • A. The remote-ip must be on a different IP address from the overlay subnet.
  • B. set net-device must be disabled to avoid dynamic interface creation.
  • C. set add-route must be enabled to add routes.
  • D. An overlay IP address with a mask of /32 must be assigned to the IPsec virtual interface.
Show Suggested Answer Hide Answer
Suggested Answer: BD 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
JLHACKER
1 month, 2 weeks ago
Selected Answer: BD
7.2 Study Guide page 336 B - Disable set net-device to ensure FortiGate does not create a dynamic interface. D - The mask for the local ip can only be /32 so the mask for the overlay subnet must be specifiedin remote-ip
upvoted 1 times
...
sankhauom
1 month, 4 weeks ago
Selected Answer: BD
B - corret - set net device should be disabled D - IPsec virtual interface /32
upvoted 1 times
...
dsmse
2 months, 2 weeks ago
Selected Answer: BD
Enterprise Firewall 7.2 Study Guide pg. 336: The mask for the local ip can only be /32 Dynamic routing is used for learning subnets
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago