Fortinet Exam NSE7_SDW-7.0 Topic 1 Question 12 Discussion

Actual exam question for Fortinet's NSE7_SDW-7.0 exam

Question #: 12
Topic #: 1

Refer to the exhibit.

Two hub-and-spoke groups are connected through a site-to-site IPsec VPN between Hub 1 and Hub 2.

Which two configuration settings are required for Toronto and London spokes to establish an ADVPN shortcut? (Choose two.)

AOn the hubs, auto-discovery-sender must be enabled on the IPsec VPNs to spokes.

BOn the spokes, auto-discovery-receiver must be enabled on the IPsec VPN to the hub.

Cauto-discovery-forwarder must be enabled on all IPsec VPNs.

DOn the hubs, net-device must be enabled on all IPsec VPNs.

Show Suggested Answer

Suggested Answer: A, B

by Merissa at Nov 24, 2023, 04:45 PM

Limited Time Offer

25%

Off

Get Premium NSE7_SDW-7.0 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Stephen

8 months ago

B and C do sound right to me. We need the spokes to be able to receive the auto-discovery messages, and we need that forwarding capability enabled across the VPNs. Although, I'm curious what 'net-device' is in option D. That one seems a bit more obscure.

upvoted 0 times

...

Brittni

8 months ago

Agreed, let's stick to the more straightforward options. B and C seem like the logical choices here to enable that ADVPN functionality between the spoke sites.

upvoted 0 times

...

8 months ago

Hmm, this is an interesting question. I'm not too familiar with ADVPN, but I think it has to do with automatically discovering and setting up VPN shortcuts between spoke sites. Let me think this through...

upvoted 0 times

...