StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · IPsec VPNs

Practice question 411 of 440 · medium

Interpret this abbreviated Phase 2 excerpt: edit "B-LAN" set phase1name "Site-B" set src-subnet 10.11.0.0 255.255.255.0 set dst-subnet 10.22.0.0 255.255.255.0 Which two statements follow? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.It describes the local 10.11.0.0/24 to remote 10.22.0.0/24 subnet scope.
  2. B.It creates a LAN allow policy automatically.
  3. C.It configures the public WAN address as 10.22.0.0.
  4. D.It forces all unrelated traffic into the tunnel.
  5. E.The Phase 2 definition is associated with the Site-B Phase 1 object.
Show the answer and explanation

✓ Correct answers

  • It describes the local 10.11.0.0/24 to remote 10.22.0.0/24 subnet scope.
  • The Phase 2 definition is associated with the Site-B Phase 1 object.

phase1name binds the Phase 2 and the subnet fields express its protected scope. The excerpt does not create policy, set the public WAN address or route every unrelated destination. A compatible mirrored peer and remaining dependencies are still required.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.