View all questions & answers for the NSE 7 - FortiSASE 25 Enterprise Administrator Exam Materials exam
NSE 7 - FortiSASE 25 Enterprise Administrator Exam Materials - Question #29 Discussion
Community Explanations & Comments (2)
Brave-Dumps.com Admin
11 months ago
Selected: B
it needs additional check
javaughn Bryan
11 months ago
Selected: B
Given that the IPsec tunnel to the San Jose POP is successfully established—as confirmed by its "Up" status—the fundamental tunnel parameters like the Remote Gateway, Network Overlay ID, and Authentication Method can be ruled out as the primary cause, as a misconfiguration in any of these would have prevented the tunnel from forming altogether.
Therefore, the connectivity problem with the SPA service must exist at the routing layer, which operates over the secure tunnel. Since BGP is the protocol responsible for dynamically exchanging routes, the BGP peering session becomes the most probable point of failure. Consequently, the administrator should first verify and correct the BGP Peer IP configuration, as an issue here would explain why the tunnel is active, but application traffic cannot be properly routed, leading to the service disruption.
ANSWER: B
Therefore, the connectivity problem with the SPA service must exist at the routing layer, which operates over the secure tunnel. Since BGP is the protocol responsible for dynamically exchanging routes, the BGP peering session becomes the most probable point of failure. Consequently, the administrator should first verify and correct the BGP Peer IP configuration, as an issue here would explain why the tunnel is active, but application traffic cannot be properly routed, leading to the service disruption.
ANSWER: B
Refer to the exhibit. An SPA service connection is experiencing connectivity problems. Which configuration setting should the administrator verify and correct first? (Choose one answer)
Brave-Dump Community Votes