What is the primary function of IPsec tunnel failover in a redundant VPN setup?

To encrypt traffic with a stronger algorithm

To switch traffic to a backup tunnel when the primary tunnel becomes unavailable

To load balance traffic across multiple tunnels based on link quality

To reduce the number of security associations

Which configuration step is essential when creating multiple IPsec tunnels for redundancy on a FortiGate?

Assigning the same phase1 interface to all tunnels

Using the same local gateway IP for all tunnels

Creating a separate phase1 interface for each tunnel

Which redundancy mechanism can be used to select the best path for VPN traffic based on link quality and performance metrics?

Static route with higher metric

In a redundant VPN setup, how does DPD contribute to failover?

By authenticating the remote peer

By detecting a dead peer and triggering the use of a backup tunnel

By increasing the encryption key length

By balancing traffic across multiple tunnels

A company has two FortiGates connected by two IPsec tunnels. They want to use both tunnels for load balancing, but also want to ensure that if one tunnel fails, all traffic goes through the remaining tunnel. They are considering using SD-WAN. What is the primary advantage of using SD-WAN over traditional ECMP routing?

SD-WAN provides better encryption than ECMP.

SD-WAN provides automatic failover based on link health, while ECMP does not.

SD-WAN is easier to configure than ECMP.

SD-WAN requires fewer IPsec tunnels than ECMP.

FortinetNSE 4 - FortiOS 7.6 Administrator

Domain 5Objective 3

Redundant VPN Between Two FortiGate Devices NSE4-FORTIOS-ADMINISTRATOR Practice Questions (Page 4)

Part of the VPNs domain, which accounts for 10-15% of the NSE4-FORTIOS-ADMINISTRATOR exam. Fortinet does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–9 in this domain), expect 1–2 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

7concepts

10-15%of the exam

Questions 16–20

16foundation · easy
What is the primary function of IPsec tunnel failover in a redundant VPN setup?
Select an answer first
17foundation · easy
Which configuration step is essential when creating multiple IPsec tunnels for redundancy on a FortiGate?
Select an answer first
18foundation · easy
Which redundancy mechanism can be used to select the best path for VPN traffic based on link quality and performance metrics?
Select an answer first
19foundation · easy
In a redundant VPN setup, how does DPD contribute to failover?
Select an answer first
20expert · hard
A company has two FortiGates connected by two IPsec tunnels. They want to use both tunnels for load balancing, but also want to ensure that if one tunnel fails, all traffic goes through the remaining tunnel. They are considering using SD-WAN. What is the primary advantage of using SD-WAN over traditional ECMP routing?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE4-FORTIOS-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE4-FORTIOS-ADMINISTRATOR” is a trademark of its owner, used for identification only.