Examice

Exam nse7_efw-72 All QuestionsBrowse all questions from this exam

Go to Exam

Question 21

Refer to the exhibit, which contains a partial VPN configuration.

What can you conclude from this configuration?

FortiGate creates separate virtual interfaces for each dial-up client

The VPN should use the dynamic routing protocol to exchange routing information through the tunnels

Dead peer detection is disabled

The routing table shows a single IPSec virtual interface

Correct Answer: D

The configuration indicates that 'set net-device disable' is specified, which means FortiGate creates a single IPsec virtual interface that is shared by all IPsec clients connecting to the dial-up VPN. As a result, the routing table shows a single IPsec virtual interface.

Discussion

Kop01Option: D

Answer D : p312 If net-device id sibaled, Fortigate creates a single IPsec virtual interface that is shared by all IPsec clients connecting to the same dial-up VPN

33k_Option: D

If net-device is disabled, FortiGate creates a single IPsec virtual interface and populates the routing-table with this interface

truserudOption: D

D is the correct answer, described on page 312 in the Study Guide.

ArtbrutOption: D

D as per study guide p. 311

Eric0_0Option: D

set net-device disable. FortiGate won't create separate virtual interface for each tunnel. Only a single interface is created.

havokduOption: D

If net-device is disabled, FortiGate creates a single IPsec virtual interface that is shared by all IPsec clients connecting to the same dial-up VPN.

charrucoOption: D

D is correct Page 312 in the Study Guide.

5deee77Option: D

D as per study guide p. 312

Flo31Option: D

Answer D