How does spoke-to-spoke traffic flow in an ADVPN hub-and-spoke topology before a shortcut is established?

It is broadcast to all spokes, and only the destination processes it

It is sent directly from the source spoke to the destination spoke using a pre-configured tunnel

It is encapsulated and sent through the hub, which forwards it to the destination spoke

It is dropped unless a shortcut has already been established

In an ADVPN hub-and-spoke topology, what is the role of the hub?

To encrypt all traffic between spokes permanently

To serve as a backup gateway that only activates when a spoke fails

To provide direct internet access for all spoke sites

To act as the central point for VPN tunnel establishment and route exchange between spokes

Which statement correctly describes how an ADVPN shortcut is established?

The hub pre-configures static tunnels between all spokes during initial setup

Each spoke independently discovers other spokes using multicast and establishes a tunnel without hub involvement

The spoke sends a request directly to the destination spoke's public IP address to initiate the tunnel

A spoke sends traffic to another spoke via the hub, and the hub signals both spokes to build a direct tunnel

Why is a dynamic routing protocol such as BGP or OSPF used over an ADVPN network?

To manage the public IP addresses of the VPN gateways

To automatically exchange routes between sites and enable optimal path selection for shortcut tunnels

To replace the need for VPN tunnels between spokes

To provide encryption for data transmitted between spoke sites

What is a key benefit of running a dynamic routing protocol over ADVPN tunnels?

It automatically updates routing tables when new sites are added or removed

It eliminates the need for the hub to participate in routing

It allows spokes to communicate without any VPN tunnels

It increases the encryption strength of the VPN tunnels

FortinetNSE 7 - Enterprise Firewall Administrator

Domain 5Objective 2

Implement ADVPN to Enable On-Demand VPN Tunnels Between Sites NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR Practice Questions (Page 1)

Part of the VPN domain, which makes up ~7% of our current practice bank. Fortinet does not publish an official question count, but from its 70-minute exam (~30–45 total, ~2–3 in this domain), expect 1–2 from this objective — we provide 6 practice questions to prepare you well beyond it. (estimate)

6questions here

2free pages

3concepts

Questions 1–5

1foundation · easy
How does spoke-to-spoke traffic flow in an ADVPN hub-and-spoke topology before a shortcut is established?
Select an answer first
2foundation · easy
In an ADVPN hub-and-spoke topology, what is the role of the hub?
Select an answer first
3foundation · easy
Which statement correctly describes how an ADVPN shortcut is established?
Select an answer first
4foundation · easy
Why is a dynamic routing protocol such as BGP or OSPF used over an ADVPN network?
Select an answer first
5foundation · easy
What is a key benefit of running a dynamic routing protocol over ADVPN tunnels?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR” is a trademark of its owner, used for identification only.