View all questions & answers for the NSE 7 - Secure Networking 7.6 Architect Exam Materials exam


NSE 7 - Secure Networking 7.6 Architect Exam Materials-Question 37 Discussion
Comment Image Comment Image Comment Image

You configure the overlay tunnels for an SD-WAN hub-and-spoke topology defined with IPsec tunnels, BGP on loopback, and dynamic BGP. Which are two recommended IPsec settings for this topology? (Choose two answers)

  • A. On the hub, set the tunnel type to static.
  • B. On the hub, set the parameter mode-cfg to enable
  • C. On the spoke, set the parameter net-device to enable.
  • D. On the spoke, configure the parameter localid
Correct Answer: B,C

Brave-Dump Clients Votes

BC 50%
CD 50%

Comments



Anonymous User 2026-07-30 15:22:04

Selected Answers: B, C


Enterprise Admin Study Guide P.105-108
FortiGate acts as IKE mode config Server -> mode-cfg enable
Setting on branches -> set net-device enable

Anonymous User 2026-08-20 00:43:31

Selected Answers: C, D


SD-WAN_7.6_Enterprise_Administrator_Study_Guide-Online (page 120)

IPsec Templates Settings—BGP on Loopback

SD-WAN Manager > Overlay Orchestration
Edit SD-WAN Overlay Template - Region Settings (1/5)

Hub template main settings

type dynamic

net-device disable

mode-cfg disable

exchange-interface-IP enable

exchange-ip-addr4: hub loopback IP address

network-overlay enable

network-id

Branch template main settings

type static

net-device enable

mode-cfg disable

exchange-interface-IP enable

exchange-ip-addr4: spoke loopback IP address

network-overlay enable

network-id

local ID

Md Nasir Uddin 2026-08-23 16:05:18

Selected Answers: B, C


config vpn ipsec phase1-interface
edit "Hub_to_Spokes"
set type dynamic <-- Must be a dial-up server, not static
set mode-cfg enable <-- RECOMMENDED: Dynamically hands out IPs to spokes
set ipv4-start-ip 169.254.1.1
set ipv4-end-ip 169.254.1.254
set net-device disable <-- Disabled on Hub to share a single interface for all dials
next
end
  • Bob 2026-08-24 12:58:11
    This config without loopback.

Pablo Meganck 2026-08-28 18:26:15

Selected Answers: C, D


Answer C and D
SD-WAN_7.6_Enterprise_Administrator_Study_Guide page 120 (BGP on loopback)

Anonymous User 2026-09-03 23:38:45

Selected Answers: B, C


correct

Luis 2026-09-07 12:53:14

Selected Answers: C, D


Answer in Fortinet Training: SD-WAN Enterprise Administrator - SD-WAN Overlay Design and Best Practices (Diapositive 30. "IPsec Templates Settings - BGP on Lookpback").