Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam NSE4_FGT-7.2 All Questions

View all questions & answers for the NSE4_FGT-7.2 exam

Exam NSE4_FGT-7.2 topic 1 question 3 discussion

Actual exam question from Fortinet's NSE4_FGT-7.2
Question #: 3
Topic #: 1
[All NSE4_FGT-7.2 Questions]

FortiGate is operating in NAT mode and is configured with two virtual LAN (VLAN) subinterfaces added to the same physical interface.
In this scenario, what are two requirements for the VLAN ID? (Choose two.)

  • A. The two VLAN subinterfaces can have the same VLAN ID, only if they have IP addresses in the same subnet.
  • B. The two VLAN subinterfaces can have the same VLAN ID, only if they belong to different VDOMs.
  • C. The two VLAN subinterfaces must have different VLAN IDs.
  • D. The two VLAN subinterfaces can have the same VLAN ID, only if they have IP addresses in different subnets.
Show Suggested Answer Hide Answer
Suggested Answer: BC 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Garry_G
Highly Voted 1 year, 6 months ago
Anything but the "different VLAN" answer is impossible from a networking view, as well as configuration on the FG is concerned. At least up to 7.0 it's impossible to configure the same VLAN on the same physical link multiple times, no matter if it's in separate VDOMs or not.
upvoted 12 times
Garry_G
1 year, 1 month ago
P.S. - did some tests - at least up to 7.0.12, the firewall will instantly complain about duplicate VLAN ID no matter if you select different VDOMs, IPs, or IPs from the same subnet (which will ADDITIONALLY cause an IP-conflict with the first VLAN interface) So, if the official test has this question and asks for two choices, it's definitely wrong ... (as any sane technician would argue)
upvoted 5 times
Bungee75
4 months, 1 week ago
t is C and D. But to achieve this monstrosity you have to implement 802.1Q and 802.1AD vlans and they need to be in different subnets. And yes this is still mind boggling.
upvoted 1 times
...
...
...
erawemk
Highly Voted 1 year, 4 months ago
Selected Answer: CD
I used my own lab to resolve this question: If you use the same VLAN ID to add a second subinterface to the same physical interface is not allowed you get the error ( VLAN ID used by another VLAN switch) unless you change the VLAN Protocol to 802.1AD, no matter the VDOM you assign the subinterface. Being said that, options A and B are not true, the option C is correct and option D is true if as I said before you use 802.1Q in one subinterface and 802.1AD in the second subinterface.
upvoted 10 times
...
Ozzygate
Most Recent 3 months ago
On other websites, this question only requests a single answer. B and D can be done using a different vlan type,but that's because it's Q in Q tunneling, so it's not really a vlan interface.
upvoted 1 times
...
AJMD
4 months, 4 weeks ago
Selected Answer: CD
C and D
upvoted 1 times
...
GasimovTofig
5 months, 1 week ago
Anybody got in Exam newly? Are those questions legit still?
upvoted 1 times
...
learner2024
5 months, 2 weeks ago
Selected Answer: CD
C is correct but not sure about the other, this questions seems like wrong to me it has single answer only
upvoted 1 times
...
GopiChandMurari
5 months, 3 weeks ago
c,D In a scenario where FortiGate is operating in NAT mode and configured with two virtual LAN (VLAN) subinterfaces added to the same physical interface, the correct requirements for the VLAN ID are: C. **The two VLAN subinterfaces must have different VLAN IDs.** Each VLAN subinterface should have a unique VLAN ID to properly segregate traffic between VLANs. D. **The two VLAN subinterfaces can have the same VLAN ID, only if they have IP addresses in different subnets.** If two VLAN subinterfaces share the same VLAN ID, they must belong to different IP subnets to avoid IP address conflicts and ensure proper routing of traffic. So, options C and D are the correct requirements for the VLAN ID in this scenario.
upvoted 1 times
...
MAUROBTA
7 months, 1 week ago
Selected Answer: BC
Las correctas son la B y C
upvoted 1 times
...
MAUROBTA
7 months, 1 week ago
Las correctas con B y C
upvoted 1 times
...
Bosubw
7 months, 1 week ago
Selected Answer: CD
Tested in lab, vdom is not significant. Only option is to use 802.1Q and 802.1AD with different subnet
upvoted 2 times
...
GoodServant
7 months, 1 week ago
C is definitely true as everyone has already mentioned. B and D are also true if you change one of the interfaces to use 802.1AD.
upvoted 1 times
...
znznzn219
9 months, 2 weeks ago
Selected Answer: BC
Correct
upvoted 1 times
...
GeniusA
10 months, 2 weeks ago
B & C is the correct answer
upvoted 1 times
...
TheManDude
11 months, 1 week ago
Selected Answer: C
This Question has been asked on 7.0 and 6.4 NSE 4. It’s always been a one answer question. So it’s only C.
upvoted 1 times
...
Diego_Farani
11 months, 3 weeks ago
Selected Answer: BC
Basic concept of VLAN.
upvoted 1 times
...
keshzy
1 year ago
VLANs split your physical LAN into multiple, logical LANs. In NAT operation mode, each VLAN forms a separate broadcast domain. Multiple VLANs can coexist in the same physical interface, provided they have different VLAN IDs. In this way, a physical interface is split into two or more logical interfaces. A tag is added to each Ethernet frame to identify the VLAN to which it belongs. Note that in a multi-VDOM environment, the physical interface and its VLAN sub-interface can be in separate VDOMs.
upvoted 1 times
...
nazareth
1 year ago
Selected Answer: BC
b and c
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...