StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · IPsec VPNs

Practice question 422 of 440 · medium

The VPN peer answers DPD, but the protected application server beyond it is unreachable. What additional measurement is appropriate?

Choose the single best answer.

  1. A.The conclusion that DPD proves every remote application is healthy.
  2. B.A change from ESP to unsupported AH.
  3. C.Only increasing the Phase 1 key lifetime.
  4. D.A representative protected-path/application reachability or SLA test.
Show the answer and explanation

✓ Correct answer

  • A representative protected-path/application reachability or SLA test.

DPD checks peer liveness, not all downstream hosts or quality. Test the intended protected path and diagnose forwarding. AH is unsupported, and changing rekey timing does not establish application health.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.