exam questions

Exam NSE7_EFW-6.4 All Questions

View all questions & answers for the NSE7_EFW-6.4 exam

Exam NSE7_EFW-6.4 topic 1 question 11 discussion

Actual exam question from Fortinet's NSE7_EFW-6.4
Question #: 11
Topic #: 1
[All NSE7_EFW-6.4 Questions]

Refer to the exhibit, which contains partial output from an IKE real-time debug.

Based on the debug output, which phase 1 setting is enabled in the configuration of this VPN?

  • A. auto-discovery-shortcut
  • B. auto-discovery-forwarder
  • C. auto-discovery-sender
  • D. auto-discovery-receiver
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
Reference:
https://docs.fortinet.com/document/fortigate/6.0.0/handbook/320160/example-advpn-configuration

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
nightfurry1990
Highly Voted 2 years, 11 months ago
Imagine 2 spokes and a hub. First spoke sends shortcutQuery to the HUB asking for shorter path for communication with the Spoke2. The hub forwards this Query to Spoke2. Spoke2 replies with shortcutOfferMSG (agreeing he is ok to start shorter communication. This MSG goes to the hub and the Hub forwards it to Spoke11. If you are the hub you will see all the messages that are exchanged from the above (as it is in the example) So the correct answer is auto-discover sender (B) Remember: Hubs (to spoke) has auto-discover sender Spoke (to hub) has auto-discover reciever Hub (to) hub has auto-discover forwarder
upvoted 5 times
nightfurry1990
2 years, 11 months ago
* C sorry - C is auto discover-sender.
upvoted 2 times
...
...
Thodoris85
Most Recent 3 years, 3 months ago
C is correct, because is Shortcut-query between Hubs
upvoted 1 times
...
kanna20201211
3 years, 4 months ago
C is correct. the fact that shortcut-query and shortcut-reply are received and forwarded indicates that the log was obtained on the HUB side.
upvoted 3 times
...
vonen
3 years, 4 months ago
B: set auto-discovery-forwarder enable
upvoted 1 times
vonen
3 years, 4 months ago
sorry, it's HUB, which has set auto-discovery-sender (= send shortcut offer). Offer is not listed here, but had to be sent before, so C is correct. On Spoke is than Set auto-discovery-reciever (= Recife shortcut offer) configured
upvoted 1 times
Jamati
3 years, 1 month ago
A HUB can also act as a forwarder using auto-discovery-forwarder.
upvoted 1 times
juan666
3 years ago
auto-discovery-forwarder just between hubs, the output only shows dynamic tunnels to spokes.So answer is only C
upvoted 2 times
...
...
...
...
rkhan81
3 years, 4 months ago
Received
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago