Câu 16: NSE4_FGT-7.0: Fortinet NSE 4 - FortiOS 7.0

A network administrator wants to set up redundant IPsec VPN tunnels on FortiGate by using two IPsec VPN tunnels and static routes. ✑ All traffic must be routed through the primary tunnel when both tunnels are up ✑ The secondary tunnel must be used only if the primary tunnel goes downIn addition, FortiGate should be able to detect a dead tunnel to speed up tunnel failover Which two key configuration changes are needed in FortiGate to meet the design requirements? (Choose two.)

1. A. Configure a higher distance on the static route for the primary tunnel, and a lower distance on the static route for the secondary tunnel.
2. B. Enable Dead Peer Detection. — đáp án hiện tại
3. C. Enable Auto-negotiate and Auto Keep Alive on the phase 2 configuration of both tunnels.
4. D. Configure a lower distance on the static route for the primary tunnel, and a higher distance on the static route for the secondary tunnel. — đáp án hiện tại