Exam NSE4_FGT-6.4 topic 1 question 32 discussion

B & C is correct. FortiGate_Infrastructure_6.4 page 219 for "B" and 243 for "C"

Ok to answer this question is B and C. B because the customer requires the tunnels to notify when a tunnel goes down. DPD is designed for that purpose. To send a packet over a firewall to determine a failover for the next tunnel after a specific amount of time of not receiving a response from its peer. C remember when it comes to choosing a route with regards to Administrative Distance. The route with the lowest distance for that particular route will be chosen. So, by configuring a lower routing distance on the primary tunnel, means that the primary tunnel will be chosen to route packets towards their destination.

Fortigate Infrastructure pg 234

I was looking to 'Prove' these answers found FortiGate_Infrastructure_7.0 page 234 for both B and C

B e C são verdadeiras

B & C Are correct

Answers are B and C. But in the real environment, the Ipsec Tunnle keeps up even the DPD enabled ... ha ha And the best way to resolve the issue in my opinion is to add IPSEC Tunnel to SDWAN group with Tunnel Interface IP address as health check...

B & C are correct

DPD- Identify Dead Tunnels Low Distance Routes will apply first So answer is BC

DPD- Identify Dead Tunnels Low Distance Routes will apply first

B and C are correct.

Correct is B and D. Both routes must have same AD.