Fortinet Exam NSE8_811 Topic 1 Question 20 Discussion

Actual exam question for Fortinet's NSE8_811 exam

Question #: 20
Topic #: 1

Click the exhibit.

A VPN IPsec is connecting the headquarters office (HQ) with a branch office (BO) and OSPF is used to redistribute routes between the offices. After deployment, a server with IP address 10.10.10.35 located on the DMZ network of the BO FortiGate, was reported unreachable from hosts located on the LAN network of the same FortiGate.

Referring to the exhibit, which statement is true?

AThe ICMP packets are Being blocked by an implicit deny policy.

BThe incoming access list should have an accept action instead deny action to solve the problem.

CA directly connected subnet is being partially superseded by an OSPF redistributed subnet.

DEnabling NAT on the VPN firewall policy will solve the problem.

Show Suggested Answer

Suggested Answer: C

by Gracia at May 10, 2022, 02:59 AM

Limited Time Offer

25%

Off

Get Premium NSE8_811 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!