View all questions & answers for the FCSS - Enterprise Firewall 7.4 Administrator Exam Materials exam


Question 50 Discussion

Refer to the exhibit, which shows the ADVPN IPsec interface representing the VPN IPsec phase 1 from Hub A to Spoke 1 and Spoke 2, and from Hub B to Spoke 3 and Spoke 4. An administrator must configure an ADVPN using IBGP and EBGP to connect overlay network 1 with2. What must the administrator configure in the phase 1 VPN IPsec configuration of the ADVPN tunnels? (Choose one answer)

  • A. set auto-discovery-sender enable and set network-id x
  • B. set auto-discovery-forwarder enable and set remote-as x
  • C. set auto-discovery-crossover enable and set enforce-multihop enable
  • D. set auto-discovery-receiver enable and set npu-offload enable
Correct Answer: A

Brave-Dump Clients Votes

A 100%

Comments



Brave-Dumps Admin 2025-04-28 16:10:51

Selected Answers: A


A is correct
EFW 7.4 study guide page 233 confirms that,

"If a hub connects to a spoke, configure an auto-discovery-sender to send shortcut messages to the spokes, allowing them to opt for a better shortcut if available."

"You must use IKEv2 to select the correct phase 1 between IPsec peers, so that multiple IKEv2 tunnels can be established between the same local/remote gateway pairs."

"You must set ADVPN on each face VPN IPsec interface depending on its role."

Hubs # config vpn ipsec phase1-interface
edit "ADVPN"
set auto-discovery-sender enable
set network-id x
end