NSE 4 - FortiOS 7.6 Administrator Exam Materials - Question #1 Discussion

B

According to knowledge, D is correct. Admin, please correct me if I am wrong

• On Demand: DPD probes are sent when there is no inbound traffic
• On Idle: DPD probes are sent when there is no traffic

Study guide page 381

D is the correct one

on demand is only if a answer of a peer, if there are not traffic is B, on idle.

1.An administrator wants to configure Dead Peer Detection (DPD) on IPSEC VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only ******when no traffic is observed****** in the tunnel. Which DPD mode on FortiGate will meet the above requirement?
A. Disabled
B. On Demand
C. Enabled
D. On Idle
Answer: D Explanation: The Dead Peer Detection (DPD) mode on FortiGate that will meet the requirement of sending DPD probes only when no traffic is observed in the tunnel is "On Idle." Therefore, the correct answer is: D. On Idle Disabled: DPD is turned off. No detection probes are sent. On Demand: DPD probes are sent when there is no traffic detected in the tunnel for a specified period. Enabled: DPD probes are sent periodically, regardless of whether there is traffic in the tunnel or not.

2.An administrator wants to configure dead peer detection (DPD) on IPsec VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only ******when there is outbound traffic***** but no response from the peer. Which DPD mode on FortiGate meets this requirement?
A. On Demand
B. On Idle
C. Disabled
D. Enabled
Answer: A Explanation: The On Demand mode for Dead Peer Detection (DPD) on FortiGate sends DPD probes ******only when there is outbound traffic and no response from the peer******. This mode is used to detect if the peer is still available without continuously sending DPD probes, reducing unnecessary traffic.

3.An administrator wants to configure dead peer detection (DPD) on IPsec VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes ******only when there is no inbound traffic******. Which DPD mode on FortiGate meets this requirement?
A. Enabled
B. On Idle
C. Disabled
D. On Demand
Answer: B
Explanation:
The "On Idle" DPD mode configures FortiGate to send DPD probes only when no inbound traffic is detected, meeting the requirement to send probes only when the tunnel is idle

Fortigate on sends DPD probes only when no traffic is received from the peer

On Demand
FortiOS 7.6 Administrator study guide, page 372

It's On Demand because in the question it's DPD required if no Inbound traffic. On idle is DPD probes are sent when there is no traffic

D is correct

On idle model , Fortigate sends a probe if no inbound traffic is received within the dpd-retryinterval. It does not require outbound traffcie to be present

Answer is D

correct answer is D

On Demand: FortiGate sends PDP probes if there is only outbound tranffic throught the tunnel, but no inbound.

D

Which one would be correct? People are saying D and On Idle looks correct too

d

d

D

D

D

DPD:
Disable: FortiGate never sends DPD probes to the remote peer, but responds to DPD probes received
On-idle: FortiGate sends DPD probes when no traffic is observed in the tunnel (outbound or inbound).
On-demand: FortiGate sends DPD probes if there is only outbound traffic through the tunnel, but no inbound. On-demand is the default setting.

On Idle (Correct)
DPD probes are sent only when the tunnel is idle

I checked the study guide it's D

correct

correct

I think it answer B (on Idle),
the fortigate in this mode only send DPD if there is no traffic in the tunnel

D is the correct

According to Fortinet's documentation, in "On Demand" mode, the IKE sends a DPD probe only when outgoing packets are transmitted; if there is no traffic, the state is B "Idle".

D

• On Demand: DPD probes are sent when there is no inbound traffic
• On Idle: DPD probes are sent when there is no traffic

DPD:

Disable: FortiGate never sends DPD probes to the remote peer, but responds to DPD probes received

On-idle: FortiGate sends DPD probes when no traffic is observed in the tunnel (outbound or inbound).

On-demand: FortiGate sends DPD probes if there is only outbound traffic through the tunnel, but no inbound. On-demand is the default setting.

https://community.fortinet.com/forticlient-4/technical-tip-configuring-dpd-dead-peer-detection-on-ipsec-vpn-94935

D, BCS Sends probes only when the tunnel is idle (no incoming traffic) and FortiGate has outbound data to send

on demand

D

D

I don't need to explain

b

d