Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Fortinet NSE8_812 Exam - Topic 1 Question 11 Discussion

Refer to the exhibits.The exhibits show a diagram of a requested topology and the base IPsec configuration.A customer asks you to configure ADVPN via two internet underlays. The requirement is that you use one interface with a single IP address on DC FortiGate.In this scenario, which feature should be implemented to achieve this requirement?
A) Use network-overlay id
B) Change advpn2 to IKEv1
C) Use local-id
D) Use peer-id

Fortinet NSE8_812 Exam - Topic 1 Question 11 Discussion

Actual exam question for Fortinet's NSE8_812 exam
Question #: 11
Topic #: 1
[All NSE8_812 Questions]

Refer to the exhibits.

The exhibits show a diagram of a requested topology and the base IPsec configuration.

A customer asks you to configure ADVPN via two internet underlays. The requirement is that you use one interface with a single IP address on DC FortiGate.

In this scenario, which feature should be implemented to achieve this requirement?

Show Suggested Answer Hide Answer
Suggested Answer: A

A is correct because using network-overlay id allows you to configure multiple ADVPN tunnels on a single interface with a single IP address on the DC FortiGate. This is explained in the FortiGate Administration Guide under ADVPN > Configuring ADVPN > Configuring ADVPN on the hub. References: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/978793/advpn https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/978793/advpn/978794/configuring-advpn


by Sylvia at Oct 17, 2023, 01:33 PM

Limited Time Offer

25%

Off

Get Premium NSE8_812 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Tula
9 months ago
Using network-overlay id might be a better option.
upvoted 0 times
...
Brandon
9 months ago
Changing advpn2 to IKEv1 seems unnecessary here.
upvoted 0 times
...
Ronny
9 months ago
Wait, can you really do it with just one IP? Sounds tricky.
upvoted 0 times
...
Alpha
10 months ago
Definitely agree with that!
upvoted 0 times
...
Twana
10 months ago
I think using local-id is the way to go.
upvoted 0 times
...
Josephine
10 months ago
I feel like changing advpn2 to IKEv1 might not be necessary, but I can't remember the exact implications of that change.
upvoted 0 times
...
Myrtie
10 months ago
I’m a bit confused about the network-overlay id option. I don’t recall it being a common choice in our practice sessions.
upvoted 0 times
...
Shawn
10 months ago
I remember practicing a similar question where we had to configure IPsec with multiple underlays. I think using peer-id could be relevant here.
upvoted 0 times
...
Nickolas
11 months ago
I think we might need to use local-id for the ADVPN setup, but I'm not entirely sure if that's the only option.
upvoted 0 times
...
Carrol
11 months ago
I'm a bit confused on this one. I'll need to re-read the question and exhibits a few times to make sure I understand the requirements before selecting an answer.
upvoted 0 times
...
Bettina
11 months ago
This is a tough one, but I'm going to go with option C and use the "local-id" feature. It seems like the most straightforward way to meet the requirements.
upvoted 0 times
...
Kristeen
11 months ago
I'm leaning towards using the "local-id" feature. That seems like it could help us achieve the requirement of a single IP address.
upvoted 0 times
...
Evangelina
11 months ago
Hmm, this looks like a tricky one. I'll need to carefully review the exhibits and requirements to determine the best approach.
upvoted 0 times
...
Tammy
11 months ago
Okay, let's see... I think the key here is using a single interface with a single IP address on the DC FortiGate. That rules out a few of the options.
upvoted 0 times
...
Bo
11 months ago
Hmm, I'm a bit unsure about this. Is the probability impact grid also a valid technique for this scenario? I'll need to think it through carefully.
upvoted 0 times
...
Caren
11 months ago
I think the key is to focus on the case where ignorable whitespace is not eliminated. That's going to give us the larger disk requirement, which is what the question is asking for.
upvoted 0 times
...
Ahmed
11 months ago
This is a good question to test our knowledge of PostgreSQL high availability capabilities. I'm fairly confident the answer is "Slot failover" since that feature is designed to maintain logical replication during failover scenarios.
upvoted 0 times
...
Jacki
11 months ago
I vaguely remember a practice question where security system access was mentioned as important... could that be relevant here?
upvoted 0 times
...

Save Cancel