ExamTopics Logo
Mail Us[email protected]
Menu
Fortinet Discussions
exam questions

Exam FCSS_SASE_AD-23 All Questions

View all questions & answers for the FCSS_SASE_AD-23 exam
Go to Exam

Exam FCSS_SASE_AD-23 topic 1 question 3 discussion

Actual exam question from Fortinet's FCSS_SASE_AD-23
Question #: 3
Topic #: 1
[All FCSS_SASE_AD-23 Questions]

Refer to the exhibits.





A FortiSASE administrator is trying to configure FortiSASE as a spoke to a FortiGate hub. The VPN tunnel does not establish.
Based on the provided configuration, what configuration needs to be modified to bring the tunnel up?

  • A. NAT needs to be enabled in the Spoke-to-Hub firewall policy.
  • B. The BGP router ID needs to match on the hub and FortiSASE.
  • C. FortiSASE spoke devices do not support mode config.
  • D. The hub needs IKEv2 enabled in the IPsec phase 1 settings.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by lalbrecht at Oct. 30, 2024, 9:18 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
sven22
1 month ago
Selected Answer: D
It is D, IKEv2 is a requirement, Mode Config is supported, so it is definitely not C!
upvoted 1 times
...
Nappel
1 month ago
Selected Answer: D
See page 124 of FortiSASE24 Study Guide.
upvoted 2 times
...
ramostdaniel
2 months, 1 week ago
D VPN needs IKEv2
upvoted 3 times
...
lalbrecht
2 months, 1 week ago
Selected Answer: D
Should be D
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago