Exam NSE4_FGT-7.0 topic 1 question 33 discussion

Actual exam question from Fortinet's NSE4_FGT-7.0

Question #: 33
Topic #: 1

An administrator wants to configure Dead Peer Detection (DPD) on IPSEC VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when no traffic is observed in the tunnel.
Which DPD mode on FortiGate will meet the above requirement?

A. On Demand
B. Disabled
C. On Idle
D. Enabled

Show Suggested Answer

Suggested Answer: C 🗳️

by Israelq at Oct. 26, 2022, 12:55 a.m.

Comments

Submit Cancel

raydel92

8 months, 4 weeks ago

Selected Answer: C

C. On Idle FortiGate Infrastructure 7.2 Study Guide (p.256): "On Idle: FortiGate sends DPD probes when no traffic is observed in the tunnel." Reference and download study guide: https://ebin.pub/fortinet-fortigate-infrastructure-study-guide-for-fortios-72.html

upvoted 1 times

...

geotown

9 months, 3 weeks ago

correct answer is C.

upvoted 1 times

...

SiqueiraZ

1 year, 5 months ago

On Idle: FortiGate sends DPD probes when no traffic is observed in the tunnel. An idle tunnel does not necessarily mean the tunnel is dead. Avoid this mode if you have many tunnels, because the overhead introduced by DPD can be very resource intensive.

upvoted 1 times

...

Rabbit414

1 year, 7 months ago

Selected Answer: C

Answer: C Fortigate Infrastructure 7.0, Page 214

upvoted 2 times

...