StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · IPsec VPNs

Practice question 425 of 440 · medium

Failover takes longer than expected because the backup Phase 2 starts negotiating only after the primary fails. Which improvement is relevant?

Choose the single best answer.

  1. A.Evaluate auto-negotiate and validate standby SA readiness and data flow.
  2. B.Enable NAT on every unrelated LAN policy.
  3. C.Give the tunnel a lower alphabetical name.
  4. D.Disable every health check so failure is never reported.
Show the answer and explanation

✓ Correct answer

  • Evaluate auto-negotiate and validate standby SA readiness and data flow.

A pre-negotiated validated standby can reduce the negotiation delay. NAT changes, names and eliminating detection do not create ready compatible traffic SAs. Read the relevant monitoring and route design as well.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.