ExamTopics Logo
Mail Us[email protected]
Menu
Fortinet Discussions
exam questions

Exam NSE7_EFW-7.2 All Questions

View all questions & answers for the NSE7_EFW-7.2 exam
Go to Exam

Exam NSE7_EFW-7.2 topic 1 question 20 discussion

Actual exam question from Fortinet's NSE7_EFW-7.2
Question #: 20
Topic #: 1
[All NSE7_EFW-7.2 Questions]

Refer to the exhibits, which contain the network topology and BGP configuration for a hub.
Exhibit A.

Exhibit B.

An administrator is trying to configure ADVPN with a hub and spoke VPN setup using iBGP. All the VPNs are up and connected to the hub. The hub is receiving route information from both spokes over iBGP; however the spokes are not receiving route information from each other.
What change must the administrator make to the hub BGP configuration so that the routes learned from one spoke are forwarded to the other spoke?

  • A. Configure the hub as a route reflector
  • B. Configure auto-discovery-sender on the hub
  • C. Add a prefix list to the hub that permits routes to be shared between the spokes
  • D. Enable route redistribution under config router bgp
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by mollyk70 at Feb. 26, 2024, 3:49 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
ccie8122
2 months, 2 weeks ago
Selected Answer: A
iBGP rules disallow advertisement of any prefix learned from any iBGP neighbor to any other iBGP neighbor. This means you must create a full mesh (i.e., all iBGP speakers must peer with ALL other iBGP speakers in the ASN). Route reflection allows you to circumvent this restriction as route reflectors will advertise all iBGP-learned routes to all of its route-reflector clients.
upvoted 1 times
...
charruco
8 months, 3 weeks ago
Selected Answer: A
A is correct page 338 Study Guide.
upvoted 1 times
...
truserud
10 months ago
Selected Answer: A
Correct answer is A, as stated on page 338 in the Study Guide.
upvoted 2 times
...
Kop01
10 months, 1 week ago
Selected Answer: A
Answer A : p338 "If you are using ibgp for advpn, you must configure the hub as a route reflector. So, routes learned from one spoke are forwarded to the other spokes."
upvoted 2 times
...
5deee77
10 months, 2 weeks ago
Selected Answer: A
p. 338 study guide
upvoted 1 times
...
Artbrut
10 months, 2 weeks ago
Selected Answer: A
p. 338 study guide. "If you are using ibgp for advpn, you must configure the hub as a route reflector. So, routes learned from one spoke are forwarded to the other spokes."
upvoted 2 times
...
Dranizz
10 months, 2 weeks ago
Selected Answer: A
They are asking about route from each other not being redistributed to each other, not the ADVPN dynamic connexion. And it shows that Route Reflector is not enabled
upvoted 2 times
...
Flo31
10 months, 2 weeks ago
Answer A
upvoted 1 times
...
33k_
10 months, 2 weeks ago
Selected Answer: B
You must enable set auto-discovery-sender if you want ADVPN. This setting indicates that when IPsec traffic transits the hub, it should send a shortcut offer to the initiator of the traffic to indicate that it couldperhaps establish a more direct connection (shortcut).
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago