StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · IPsec VPNs

Practice question 421 of 440 · medium

When does DPD on-demand initiate the relevant peer-liveness checking?

Choose the single best answer.

  1. A.When outbound IPsec traffic receives no response from the peer.
  2. B.Periodically on every idle tunnel regardless of outbound traffic.
  3. C.Only when the Phase 2 lifetime expires.
  4. D.Whenever a NAT keepalive is successfully sent.
Show the answer and explanation

✓ Correct answer

  • When outbound IPsec traffic receives no response from the peer.

On-demand DPD responds to outbound traffic with no peer response. Periodic idle probing, rekey lifetime and NAT keepalives serve different conditions; sending a keepalive alone is not a DPD acknowledgment.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.