Câu 16: FCSS_EFW_AD-7.6: NSE 7 - Enterprise Firewall 7.6 Administrator

Refer to the exhibit. A partial VPN configuration is shown. Which statement about this VPN IPsec phase 1 configuration is correct?

1. A. FortiGate will not add a route to its routing information base (RIB) or forwarding information base (FIB) when the dynamic tunnel is negotiated.
2. B. This configuration must include certificates associated peer IDs to enhance security.
3. C. A separate interface is created for each dial-up tunnel, which can be slower and more resource intensive, especially in large networks.
4. D. This configuration is the best for networks with regular traffic intervals, providing a balance between connectivity assurance and resource utilization. — đáp án hiện tại