Fortinet NSE8_812 Exam - Topic 1 Question 11 Discussion

Actual exam question for Fortinet's NSE8_812 exam

Question #: 11
Topic #: 1

Refer to the exhibits.

The exhibits show a diagram of a requested topology and the base IPsec configuration.

A customer asks you to configure ADVPN via two internet underlays. The requirement is that you use one interface with a single IP address on DC FortiGate.

In this scenario, which feature should be implemented to achieve this requirement?

AUse network-overlay id

BChange advpn2 to IKEv1

CUse local-id

DUse peer-id

Show Suggested Answer

Suggested Answer: A

A is correct because using network-overlay id allows you to configure multiple ADVPN tunnels on a single interface with a single IP address on the DC FortiGate. This is explained in the FortiGate Administration Guide under ADVPN > Configuring ADVPN > Configuring ADVPN on the hub. References: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/978793/advpn https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/978793/advpn/978794/configuring-advpn

by Sylvia at Oct 17, 2023, 01:33 PM

Limited Time Offer

25%

Off

Get Premium NSE8_812 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tula

4 months ago

Using network-overlay id might be a better option.

upvoted 0 times

...

Brandon

4 months ago

Changing advpn2 to IKEv1 seems unnecessary here.

upvoted 0 times

...

Ronny

4 months ago

Wait, can you really do it with just one IP? Sounds tricky.

upvoted 0 times

...

Alpha

4 months ago

Definitely agree with that!

upvoted 0 times

...

Twana

5 months ago

I think using local-id is the way to go.

upvoted 0 times

...

Josephine

5 months ago

I feel like changing advpn2 to IKEv1 might not be necessary, but I can't remember the exact implications of that change.

upvoted 0 times

...

Myrtie

5 months ago

I’m a bit confused about the network-overlay id option. I don’t recall it being a common choice in our practice sessions.

upvoted 0 times

...

Shawn

5 months ago

I remember practicing a similar question where we had to configure IPsec with multiple underlays. I think using peer-id could be relevant here.

upvoted 0 times

...

Nickolas

5 months ago

I think we might need to use local-id for the ADVPN setup, but I'm not entirely sure if that's the only option.

upvoted 0 times

...

Carrol

5 months ago

I'm a bit confused on this one. I'll need to re-read the question and exhibits a few times to make sure I understand the requirements before selecting an answer.

upvoted 0 times

...

Bettina

5 months ago

This is a tough one, but I'm going to go with option C and use the "local-id" feature. It seems like the most straightforward way to meet the requirements.

upvoted 0 times

...

Kristeen

5 months ago

I'm leaning towards using the "local-id" feature. That seems like it could help us achieve the requirement of a single IP address.

upvoted 0 times

...

Evangelina

5 months ago

Hmm, this looks like a tricky one. I'll need to carefully review the exhibits and requirements to determine the best approach.

upvoted 0 times

...

Tammy

6 months ago

Okay, let's see... I think the key here is using a single interface with a single IP address on the DC FortiGate. That rules out a few of the options.

upvoted 0 times

...

Bo

6 months ago

Hmm, I'm a bit unsure about this. Is the probability impact grid also a valid technique for this scenario? I'll need to think it through carefully.

upvoted 0 times

...

Caren

6 months ago

I think the key is to focus on the case where ignorable whitespace is not eliminated. That's going to give us the larger disk requirement, which is what the question is asking for.

upvoted 0 times

...

Ahmed

6 months ago

This is a good question to test our knowledge of PostgreSQL high availability capabilities. I'm fairly confident the answer is "Slot failover" since that feature is designed to maintain logical replication during failover scenarios.

upvoted 0 times

...

Jacki

6 months ago

I vaguely remember a practice question where security system access was mentioned as important... could that be relevant here?

upvoted 0 times

...