StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · IPsec VPNs

Practice question 415 of 440 · medium

Two sites in a partial mesh have no direct tunnel, but should communicate through a third site. What must the design provide?

Choose the single best answer.

  1. A.Only adjusting the IKE key lifetime, without providing transit configuration.
  2. B.Only a NAT keepalive on the direct tunnel that does not exist.
  3. C.A permitted transit path with suitable routes, selectors and policies.
  4. D.An assumption that partial mesh means every pair already has a direct tunnel.
Show the answer and explanation

✓ Correct answer

  • A permitted transit path with suitable routes, selectors and policies.

Partial mesh omits selected direct pairs, so the transit design must carry and authorize the traffic. It is not a full mesh. Rekey timing and keepalives for a nonexistent direct path cannot supply transit connectivity.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.