Quiz
Site-to-Site IPSec VPN II
This quiz has question types that open in the usual player.
Questions in this quiz (19)
1ADVPN
- AAuto discovery VPN
- BActive Directory VPN
- CActive Direct VPN
2Which VPN topology does not allow direct communication between spokes?
- Aa. Partial mesh
- Bb. Hub-and-spoke
3Which VPN topology is the most fault tolerant?
- Aa. Full mesh
- Bb. Hub-and-spoke
4FortiGate operation mode: NAT and transparent
L2TP-over—lPsec: Yes
GRE—over—lPsec: No
Routing protocols: No
Number of policies per VPN: One policy controls both traffic directions- APolicy-based
- BRoute-based
5FortiGate operation mode: Only NAT
L2TP-over—lPsec: Yes
GRE—over—lPsec: Yes
Routing protocols: Yes
Number of policies per VPN: Two policies (usually)—one for each direction- APolicy-based
- BRoute-based
6Transparent mode supports only policy-based VPNs
- ATrue
- BFalse
7Generally, try to use policy-based because it offers more flexibility and control.
- ATrue
- BFalse
8Traffic must be routed to the lPsec virtual network interface.
Usually two firewall policies with the Action set to ACCEPT are required (one per direction).- ARoute-based (interface-based)
- BPolicy-based (tunnel-based)
9One firewall policy with the Action set to lPsec is required.
By default, hidden on the GUI. To show.- ARoute-based (interface-based)
- BPolicy-based (tunnel-based)
10Wizard vpn creates only route-based VPNs
- ATrue
- BFalse
11SD-WAN feature can also be used for VPN redundancy.
- ATrue
- BFalse
12[blank_start]1-[blank_end] Add one phase 1 configuration for each tunnel. Dead peer detection (DPD) must be enabled on both ends.
[blank_start]2-[blank_end] Add at least one phase 2 definition for each phase 1.
[blank_start]3-[blank_end] Add one static route for each path. Use distance or priority to select primary routes over backup routes. Alternatively, use dynamic routing.
[blank_start]4-[blank_end] Configure firewall policies for each lPsec interface.- A1-
- B2-
- C3-
- D4-
13When configuring policy-based VPN, what option do you need to select for the Action setting?
- Aa. IPsec
- Bb. Authenticate
14Which of the following statements about route-based VPN is correct?
- Aa. It usually requires two firewall policies—one for each direction.
- Bb. One policy controls both traffic directions.
15diagnose vpn tunnel list - command to verify if traffic is offloaded.
- ATrue
- BFalse
16Keeping a real-time debug running on the background of a FortiGate for a long time it is necessary some times.
- ATrue
- BFalse
17?
- Avpn debug
- Bipsec vpn policy-based debug
- Cipsec vpn routed-based debug
18Which one of the following messages indicates that both ingress and egress ESP packets will be offloaded?
- Aa.npu_flag=00
- Bb.npu_flag=03
19If you enable NAT in the firewall policy for VPN, which of the following issues may occur?
- Aa. Quick mode selector may mismatch
- Bb. Traffic may not be routed to the tunnel
Information
- Description
- NSE4 6.0 NSE4 6.0 Quiz on Site-to-Site IPSec VPN II, created by Marcos Avila on 22/07/2018.
- Author
- Marcos Avila
- Language
- Español
- Views
- 187
- Tags
- Rating
- 5.0 out of 5 · 1 rating Rate this quiz