What is the purpose of tunnel monitoring in a redundant VPN configuration?

To compress the data transmitted over the tunnel

To continuously check the health of the tunnel and detect failures

What is the primary purpose of configuring redundant VPN tunnels between two FortiGate devices?

To increase the encryption strength of the VPN traffic

To combine bandwidth of multiple tunnels into a single logical link

To reduce the number of IPsec security associations needed

To provide high availability and failover if the primary tunnel fails

What is a benefit of using BGP for routing across redundant VPN tunnels?

It provides dynamic route advertisement and failover based on tunnel availability

It reduces the number of IPsec tunnels required

It automatically encrypts the VPN traffic

It eliminates the need for firewall policies

A company has two FortiGates connected by two IPsec tunnels. They want to use both tunnels simultaneously to increase throughput, but also want automatic failover if one tunnel fails. Which approach should they use?

Configure both tunnels in an SD-WAN zone and enable load balancing with health-check based failover.

Configure both tunnels with equal route metrics and enable DPD on both.

Configure one tunnel as primary and the other as backup, and use policy routing to send specific traffic over each.

Configure both tunnels with different route metrics and rely on the FortiGate's built-in load balancing.

FortinetNSE 4 - FortiOS 7.6 Administrator

Domain 5Objective 3

Redundant VPN Between Two FortiGate Devices NSE4-FORTIOS-ADMINISTRATOR Practice Questions (Page 1)

Part of the VPNs domain, which accounts for 10-15% of the NSE4-FORTIOS-ADMINISTRATOR exam. Fortinet does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–9 in this domain), expect 1–2 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

7concepts

10-15%of the exam

Questions 1–5

1foundation · easy
What is the purpose of tunnel monitoring in a redundant VPN configuration?
Select an answer first
2foundation · easy
What is the primary purpose of configuring redundant VPN tunnels between two FortiGate devices?
Select an answer first
3application · medium
Two FortiGates are connected by two IPsec tunnels. The administrator has configured DPD with a retry interval of 5 seconds and a retry count of 3. What is the maximum time it will take for DPD to declare the peer dead?
Select an answer first
4foundation · easy
What is a benefit of using BGP for routing across redundant VPN tunnels?
Select an answer first
5application · medium
A company has two FortiGates connected by two IPsec tunnels. They want to use both tunnels simultaneously to increase throughput, but also want automatic failover if one tunnel fails. Which approach should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE4-FORTIOS-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE4-FORTIOS-ADMINISTRATOR” is a trademark of its owner, used for identification only.