Exam NSE8 topic 1 question 10 discussion

Actual exam question from Fortinet's NSE8

Question #: 10
Topic #: 1

You are asked to establish a VPN tunnel with a service provider using a third-party VPN device. The service provider has assigned subnet 30.30.30.0/24 for your outgoing traffic going towards the services hosted by the provider on network 20.20.20.0/24. You have multiple computers which will be accessing the remote services hosted by the service provider.

Which three configuration components meet these requirements? (Choose three.)

A. Configure an IP Pool of type Overload for range 30.30.30.10-30.30.30.10. Enable NAT on a policy from your LAN forwards the VPN tunnel and select that pool.
B. Configure IPsec phase 2 proxy IDs for a source of 10.10.10.0/24 and destination of 20.20.20.0/24.
C. Configure an IP Pool of Type One-to-One for range 30.30.30.10-30.30.30.10. Enable NAT on a policy from your LAN towards the VPN tunnel and select that pool.
D. Configure a static route towards the VPN tunnel for 20.20.20.0/24.
E. Configure IPsec phase 2 proxy IDs for a source of 30.30.30.0/24 and destination of 20.20.20.0/24.

Show Suggested Answer

Suggested Answer: CDE 🗳️

by doreen127 at March 10, 2022, 4:47 a.m.

Comments

Submit Cancel

doreen127

3 years, 1 month ago

opps, wrong for previous answer, I meant for BCD

upvoted 1 times

...

doreen127

3 years, 1 month ago

it should be ACD. The phase 2 selector is for local lan and remote lan, which has nothing to do with the NAT

upvoted 1 times

...

Exam NSE8 All Questions

View all questions & answers for the NSE8 exam

Exam NSE8 topic 1 question 10 discussion

Comments

doreen127

doreen127

SY0-701