ExamTopics Logo
Mail Us[email protected]
Menu
Fortinet Discussions
exam questions

Exam FCP_FGT_AD-7.4 All Questions

View all questions & answers for the FCP_FGT_AD-7.4 exam
Go to Exam

Exam FCP_FGT_AD-7.4 topic 1 question 10 discussion

Actual exam question from Fortinet's FCP_FGT_AD-7.4
Question #: 10
Topic #: 1
[All FCP_FGT_AD-7.4 Questions]

A network administrator wants to set up redundant IPsec VPN tunnels on FortiGate by using two IPsec VPN tunnels and static routes.
All traffic must be routed through the primary tunnel when both tunnels are up. The secondary tunnel must be used only if the primary tunnel goes down. In addition, FortiGate should be able to detect a dead tunnel to speed up tunnel failover.
Which two key configuration changes must the administrator make on FortiGate to meet the requirements? (Choose two.)

  • A. Enable Dead Peer Detection.
  • B. Enable Auto-negotiate and Autokey Keep Alive on the phase 2 configuration of both tunnels.
  • C. Configure a lower distance on the static route for the primary tunnel, and a higher distance on the static route for the secondary tunnel.
  • D. Configure a higher distance on the static route for the primary tunnel, and a lower distance on the static route for the secondary tunnel.
Show Suggested Answer Hide Answer
Suggested Answer: AC 🗳️
by TIGERZ44 at Sept. 1, 2024, 7:26 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
rigonet
1 day, 16 hours ago
Selected Answer: AC
Conclusion: Enable A (Dead Peer Detection) for failover detection and C (lower distance for the primary tunnel) to prioritize it. Explanation: A. Enable Dead Peer Detection. Correct. Dead Peer Detection (DPD) is essential to quickly detect when a tunnel is down, enabling FortiGate to failover to the secondary tunnel. B. Enable Auto-negotiate and Autokey Keep Alive on the phase 2 configuration of both tunnels. Incorrect. While helpful for maintaining tunnel stability, this setting is not directly required to detect dead tunnels or configure routing preferences. C. Configure a lower distance on the static route for the primary tunnel, and a higher distance on the static route for the secondary tunnel. Correct. A lower distance ensures the primary tunnel is preferred for traffic. The higher distance on the secondary tunnel ensures it is used only during failover. D. Configure a higher distance on the static route for the primary tunnel, and a lower distance on the static route for the secondary tunnel. Incorrect. This reverses the desired behavior, making the secondary tunnel primary.
upvoted 2 times
...
sxcap
1 week, 4 days ago
Selected Answer: AC
Enable Deed Pear detection complies the second requirement Configure a lower distance on the primary static route complies the first requirement
upvoted 1 times
...
vuhidus
3 weeks, 3 days ago
Selected Answer: AC
A & C
upvoted 1 times
...
s4mu3l007
1 month, 1 week ago
a & C is correct
upvoted 1 times
...
youla5
2 months, 2 weeks ago
correct answers
upvoted 1 times
...
TIGERZ44
3 months, 2 weeks ago
Selected Answer: AC
AC. lower administrative distance = more preferred
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago