StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · IPsec VPNs

Practice question 426 of 440 · hard

The preferred VPN recovers, but established sessions continue using the backup while new sessions can select the preferred path. Which interpretation is reasonable?

Choose the single best answer.

  1. A.Recovery must immediately move every packet or the VPN is always broken.
  2. B.The primary route can never become usable after a failure.
  3. C.PFS automatically moves every established session to the primary on recovery.
  4. D.Session preservation and cached forwarding can make established-session behavior differ from new selection.
Show the answer and explanation

✓ Correct answer

  • Session preservation and cached forwarding can make established-session behavior differ from new selection.

Routing preference and existing session state can yield different failback behavior. An immediate universal move is not guaranteed. Recovery can restore route eligibility; PFS governs keying rather than route/session failback.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.