StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · IPsec VPNs

Practice question 416 of 440 · hard

Which three dependencies must a hub verify for spoke-to-spoke IPsec transit? Select three answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Compatible protected selectors for the transit traffic.
  2. B.Accepting tunnel-to-tunnel forwarding policies.
  3. C.A requirement that every spoke’s traffic terminate on the hub management GUI.
  4. D.A rule that IKE events replace all user-traffic authorization.
  5. E.Routes that select the intended destination tunnel.
Show the answer and explanation

✓ Correct answers

  • Compatible protected selectors for the transit traffic.
  • Accepting tunnel-to-tunnel forwarding policies.
  • Routes that select the intended destination tunnel.

Hub transit needs a path, traffic-SA scope and forwarding permission. Management access is a separate local-in flow, and an IKE relationship is not a substitute for authorizing protected user traffic.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.