View all questions & answers for the FCSS - Enterprise Firewall 7.4 Administrator Exam Materials exam


Question 62 Discussion

Refer to the exhibit, which shows a network diagram showing the addition of site 2 with an overlapping network segment to the existing VPN IPsec connection between the hub and site 1. Which IPsec phase 2 configuration must an administrator make on the FortiGate hub to enable equal-cost multi-path (ECMP) routing when multiple remote sites connect with overlapping subnets? (Choose one answer)

  • A. Set route-overlap to either use-new or use-old
  • B. Set net-device to ecmp
  • C. Set single-source to enable
  • D. Set route-overlap to allow
Correct Answer: D

Brave-Dump Clients Votes

D 100%

Comments



Brave-Dumps Admin 2025-05-05 17:08:06

Selected Answers: D


D is correct EFW 7.4 study guide page 198 confirms that,

"allow: Keeps the existing dialup VPN active and accepts the new one, with traffic from the central FortiGate load balanced, equal-cost multi-path (ECMP) between both VPNs."