Exam NSE4_FGT-7.2 topic 1 question 10 discussion

A. 192.168.2.0/24 For an IPsec VPN between site A and site B, the administrator has configured the local quick mode selector for site A as 192.168.1.0/24 and the remote quick mode selector as 192.168.2.0/24. This means that the VPN will allow traffic to and from the 192.168.1.0/24 subnet at site A to reach the 192.168.2.0/24 subnet at site B. To complete the configuration, the administrator must configure the local quick mode selector for site B. To do this, the administrator must use the same subnet as the remote quick mode selector for site A, which is 192.168.2.0/24. This will allow traffic to and from the 192.168.2.0/24 subnet at site B to reach the 192.168.1.0/24 subnet at site A. Therefore, the administrator must configure the local quick mode selector for site B as 192.168.2.0/24.

To establish a successful IPsec VPN tunnel, both sides must have mirrored Quick Mode selectors.

Local Quick Mode for Site B is Remote Quick Mode for Site A. A is correct.

A is right

For site B, the local quick mode selector should be the opposite of what's configured for site A's remote quick mode selector. Therefore, it should be: Local quick mode selector for site B: 192.168.2.0/24.

Its quite well explained that A site has local subnet of 192.168.1.0/24, how on earth could site B have the same local subnet and then we should expect this setup to work somehow? :D The From A-site perspective the remote B-site network is 192.168.2.0/24, which would dircelty tell us that from B-perspective, remote is 192.168.1.0/24 and local must therefore be 192.168.2.0/24 for this tunnel to work properly.

In an IPsec VPN configuration, the local quick mode selector for one site is typically the remote quick mode selector for the other site123. This is because the local and remote selectors define the subnets that will be involved in the VPN connection123. Given that the local quick mode selector for site A is 192.168.1.0/24 and the remote quick mode selector is 192.168.2.0/24, the local quick mode selector for site B should be the remote quick mode selector of site A. Therefore, the correct answer is: A. 192.168.2.0/24

A. 192.168.2.0/24

Option A is the correct answer

Opuesto del site A

A is the correct answer

A. 192.168.2.0/24 Reference and download study guide: https://ebin.pub/fortinet-fortigate-infrastructure-study-guide-for-fortios-72.html

Correct answer is A

192.168.2.0/24

Si configuro primero el A, colocando un local y un remoto, debe copiar lo mismo en el B. Pero invertido.

SiteA: local quick mode selector is 192.168.1.0/24 and the remote quick mode selector is 192.168.2.0/24 SiteB: local quick mode selector is 192.168.2.0/24 and the remote quick mode selector is 192.168.1.0/24 This is set to make a working Phase 2 VPN configuration, the tricky words are local and SiteB

A. 192.168.2.0/24