Fortinet Exam NSE7_EFW-7.0 Topic 5 Question 22 Discussion

Actual exam question for Fortinet's NSE7_EFW-7.0 exam

Question #: 22
Topic #: 5

[All NSE7_EFW-7.0 Questions]

Which two statements about OCVPN are true? (Choose two.)

AOnly root vdom supports OCVPN.

BOCVPN supports static and dynamic IPs in WAN interface.

COCVPN offers only Hub-Spoke VPNs.

DFortiGate devices under different FortiCare accounts can be used to form OCVPN.

Show Suggested Answer

Suggested Answer: A, B

https://docs.fortinet.com/document/fortigate/6.0.0/cookbook/977344/one-click-vpn-ocvpn

https://docs.fortinet.com/document/fortigate/6.2.9/cookbook/496884/overlay-controller-vpn-ocvpn

by Deonna at Nov 26, 2023, 07:48 PM

Limited Time Offer

25%

Off

Get Premium NSE7_EFW-7.0 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sherell

8 months ago

Haha, imagine trying to set up an OCVPN with FortiGates under different accounts. That sounds like a nightmare! Option D is definitely not true.

upvoted 0 times

...

Sherill

8 months ago

I agree, option B seems right. But I'm not sure about the other options. Does OCVPN really only support Hub-Spoke VPNs? That seems a bit limiting.

upvoted 0 times

Maxima

7 months ago

Yes, that is one of the correct statements. Only root vdom supports OCVPN.

upvoted 0 times

...

Mozell

7 months ago

So, only root vdom supports OCVPN, right?

upvoted 0 times

...

Elsa

8 months ago

Yes, that is correct. You can use FortiGate devices under different FortiCare accounts for OCVPN.

upvoted 0 times

...

Stefania

8 months ago

But FortiGate devices under different FortiCare accounts can be used for OCVPN, right?

upvoted 0 times

...

Dawne

8 months ago

Yes, OCVPN does offer only Hub-Spoke VPNs.

upvoted 0 times

...

Lizbeth

8 months ago

C) OCVPN offers only Hub-Spoke VPNs.

upvoted 0 times

...

Donte

8 months ago

B) OCVPN supports static and dynamic IPs in WAN interface.

upvoted 0 times

...

Teresita

8 months ago

Hmm, I think the key is to understand the capabilities and limitations of OCVPN. From what I know, option B sounds correct - OCVPN should support both static and dynamic WAN IPs.

upvoted 0 times

...

Thad

8 months ago

This OCVPN question seems pretty tricky. I'm not sure I fully understand the differences between static and dynamic IPs, and how that affects OCVPN configuration.

upvoted 0 times

...