Fortinet Exam NSE7_EFW-7.0 Topic 5 Question 22 Discussion

Actual exam question for Fortinet's NSE7_EFW-7.0 exam

Question #: 22
Topic #: 5

[All NSE7_EFW-7.0 Questions]

Which two statements about OCVPN are true? (Choose two.)

AOnly root vdom supports OCVPN.

BOCVPN supports static and dynamic IPs in WAN interface.

COCVPN offers only Hub-Spoke VPNs.

DFortiGate devices under different FortiCare accounts can be used to form OCVPN.

Show Suggested Answer

Suggested Answer: A, B

https://docs.fortinet.com/document/fortigate/6.0.0/cookbook/977344/one-click-vpn-ocvpn

https://docs.fortinet.com/document/fortigate/6.2.9/cookbook/496884/overlay-controller-vpn-ocvpn

by Deonna at Nov 26, 2023, 07:48 PM

Limited Time Offer

25%

Off

Get Premium NSE7_EFW-7.0 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sherell

8 days ago

Haha, imagine trying to set up an OCVPN with FortiGates under different accounts. That sounds like a nightmare! Option D is definitely not true.

upvoted 0 times

...

Sherill

9 days ago

I agree, option B seems right. But I'm not sure about the other options. Does OCVPN really only support Hub-Spoke VPNs? That seems a bit limiting.

upvoted 0 times

...

Teresita

10 days ago

Hmm, I think the key is to understand the capabilities and limitations of OCVPN. From what I know, option B sounds correct - OCVPN should support both static and dynamic WAN IPs.

upvoted 0 times

...

Thad

11 days ago

This OCVPN question seems pretty tricky. I'm not sure I fully understand the differences between static and dynamic IPs, and how that affects OCVPN configuration.

upvoted 0 times

...