FCSS_EFW_AD-7.6 무료 덤프문제 온라인 액세스

Refer to the exhibit.

The network diagram shows the addition of Site 2 with an overlapping network segment to the existing VPN IPsec connection between the hub and Site 1.
Which IPsec phase 2 configuration must you make on the FortiGate hub to enable equal-cost multi-path (ECMP) routing when multiple remote sites connect with overlapping subnets?

• A.Set route-overlap to allow
• B.Set route-overlap to either use-new or use-old
• C.Set net-device to ecmp
• D.Set multipath to enable

The IT department discovered during the last network migration that all zero phase selectors in phase 2 IPsec configurations impacted network operations. What are two valid approaches to prevent this during future migrations? (Choose two.)

• A.Clearly indicate to the VPN which segments will be encrypted in the phase two selectors.
• B.Use routing protocols to specify allowed subnets over the tunnel.
• C.Configure an IPsec-aggregate to create redundancy between each firewall peer.
• D.Configure an IP address on the IPsec interface of each firewall to establish unique peer connections and avoid impacting network operations.

Refer to the exhibit, which shows an ADVPN network.

An administrator must configure an ADVPN using IBGP and EBGP to connect overlay network 1 with 2.
What must the administrator configure in the phase 1 VPN IPSEC configuration of the Hub2Hub tunnels?

• A.set auto-discovery-forwarder enable
• B.set auto-discovery-receiver enable
• C.set auto-discovery-sender enable
• D.set add-route enable

Which two statements about IKE version 2 fragmentation are true? (Choose two.)

• A.IKEv2 fragmentation is performed at IP layer.
• B.Only some IKE version 2 packets are considered fragmentable.
• C.The maximum number of IKE version 2 fragments are 64.
• D.The reassembly timeout default value is 30 seconds.

Refer to the exhibit, which shows a command output.

FortiGate_A and FortiGate_B are members of an FGSP cluster in an enterprise network.
While testing the cluster using the ping command, the administrator monitors packet loss and found that the session output on FortiGate_B is as shown in the exhibit.
What could be the cause of this output on FortiGate_B?

• A.FortiGate_A and FortiGate_B have the same standalone-group-id value.
• B.FortiGate_B is configured in passive mode.
• C.The session synchronization is encrypted.
• D.session-pickup-connectionless is set to disable on FortiGate_B.