StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · IPsec VPNs

Practice question 405 of 440 · easy

A route-based tunnel named Branch-B is up. Which route expression should normally direct the remote protected /24 into it?

Choose the single best answer.

  1. A.A remote-subnet route using device Branch-B.
  2. B.A VIP whose mapped IP is the public peer address, with no tunnel route.
  3. C.An internet default whose gateway is the remote private host.
  4. D.An application-control override named Branch-B.
Show the answer and explanation

✓ Correct answer

  • A remote-subnet route using device Branch-B.

The tunnel virtual interface is the route-based forwarding device. A VIP, invalid private-host internet gateway or security-profile label does not replace the remote-subnet tunnel route.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.