StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · IPsec VPNs

Practice question 437 of 440 · hard

Two sites have overlapping private networks and need controlled access through a VPN. What is the best design-level response?

Choose the single best answer.

  1. A.Deliberately plan translated identities, selectors, routes and policies rather than enabling NAT blindly.
  2. B.Assume IPsec encryption automatically removes every addressing overlap.
  3. C.Disable all selectors and routes because overlapping hosts need no path.
  4. D.Require both sites to send all private traffic through their public internet default.
Show the answer and explanation

✓ Correct answer

  • Deliberately plan translated identities, selectors, routes and policies rather than enabling NAT blindly.

Overlapping addressing requires an explicit resolution strategy, potentially NAT, with consistent protected/translated identities and return paths. Encryption does not make ambiguous addresses unique. Removing paths or sending private traffic indiscriminately to the internet does not supply the required controlled connectivity.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.