Exam NSE8 topic 1 question 11 discussion

Actual exam question from Fortinet's NSE8

Question #: 11
Topic #: 1

FortiGate1 has a gateway-to-gateway IPsec VPN to FortiGate2. The entire IKE negotiation between FortiGate1 and FortiGate2 is on UDP port 500. A PC on
FortuGate2s local area network is sending continuous ping requests over the VPN tunnel to a PC of FortiGate1s local area network. No other traffic is sent over the tunnel.

Which statement is true on this scenario?

A. FortiGate1 sends an R-U-THERE packet every 300 seconds while ping traffic is flowing.
B. FortiGate1 sends an R-U-THERE packet if pings stop for 300 seconds and no IKE packet is received during this period.
C. FortiGate1 sends an R-U-THERE packet if pings stop for 60 seconds and no IKE packet is received during this period.
D. FortiGate1 sends an R-U-THERE packet every 60 seconds while ping traffic is flowing.

Show Suggested Answer

Suggested Answer: C 🗳️
http://kb.fortinet.com/kb/documentLink.do?externalID=FD35337

by doreen127 at March 10, 2022, 5:14 a.m.

Comments

Submit Cancel

doreen127

3 years, 1 month ago

it should be D https://community.fortinet.com/t5/FortiGate/Technical-Tip-Explanation-of-the-DPD-effect-on-a-dialup-IPsec/ta-p/192495

upvoted 1 times

...

Exam NSE8 All Questions

View all questions & answers for the NSE8 exam

Exam NSE8 topic 1 question 11 discussion

Comments

doreen127

SY0-701