Fortinet Exam NSE7_EFW-7.0 Topic 5 Question 28 Discussion

Actual exam question for Fortinet's NSE7_EFW-7.0 exam

Question #: 28
Topic #: 5

Refer to the exhibits.

Which contain the partial configurations of two VPNs on FortiGate.

An administrator has configured two VPNs for two different user groups. Users who are in the Users-2 group are not able to connect to the VPN. After running a diagnostics command, the administrator discovered that FortiGate is not matching the user-2 VPN for members of the Users-2 group.

Which two changes must administrator make to fix the issue? (Choose two.)

AUse different pre-shared keys on both VPNs

BEnable Mode Config on both VPNs.

CSet up specific peer IDs on both VPNs.

DChange to aggressive mode on both VPNs.

Show Suggested Answer

Suggested Answer: C, D

To set peer-id, the VPN must be set in aggressive mode - https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-use-Peer-IDs-to-select-an-IPSec-dialup/ta-p/192292

by Stephen at Mar 16, 2024, 01:54 AM

Limited Time Offer

25%

Off

Get Premium NSE7_EFW-7.0 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Buddy

5 months ago

Setting up specific peer IDs on both VPNs could help in matching the user-2 VPN for Users-2 group.

upvoted 0 times

...

Douglass

5 months ago

I believe enabling Mode Config on both VPNs could also be a solution.

upvoted 0 times

...

Vallie

5 months ago

I agree, using different pre-shared keys might solve the issue.

upvoted 0 times

...

Nancey

5 months ago

I think the administrator should check the pre-shared keys on both VPNs.

upvoted 0 times

...

Diane

6 months ago

Setting up specific peer IDs on both VPNs could help in matching the user-2 VPN for Users-2 group.

upvoted 0 times

...

Detra

6 months ago

I believe enabling Mode Config on both VPNs could also be a solution.

upvoted 0 times

...

Flo

6 months ago

I agree, using different pre-shared keys might solve the issue.

upvoted 0 times

...

Mitzie

6 months ago

I think the administrator should check the pre-shared keys on both VPNs.

upvoted 0 times

...

Joesph

7 months ago

Agreed, C. And enabling Mode Config on both VPNs might help as well. That could ensure the users are getting the correct configuration when they connect.

upvoted 0 times

...

Janine

7 months ago

Personally, I would start by checking the pre-shared keys. Making sure they are different on each VPN sounds like a good first step. And setting up specific peer IDs could also help distinguish between the two VPNs.

upvoted 0 times

...

Kanisha

7 months ago

You're right, A. I'm thinking the administrator might need to take a closer look at the VPN settings. Perhaps the pre-shared keys or the peer IDs are not set up correctly.

upvoted 0 times

...

Tamesha

7 months ago

Hmm, this is an interesting one. The issue seems to be that the FortiGate is not matching the user-2 VPN for the members of the Users-2 group. I wonder if the problem could be with the configuration of the VPN itself.

upvoted 0 times