NSE 7 – Enterprise Firewall 6.4 — Question 13

Which two statements about OCVPN are true? (Choose two.)

Answer options

• A. Only root vdom supports OCVPN.
• B. OCVPN supports static and dynamic IPs in WAN interface.
• C. OCVPN offers only Hub-Spoke VPNs.
• D. FortiGate devices under different FortiCare accounts can be used to form OCVPN.

Correct answer: A, B

Explanation

The correct answers are A and B because OCVPN indeed only supports the root vdom and allows for both static and dynamic IP addresses on the WAN interface. Options C and D are incorrect as OCVPN can support more than just Hub-Spoke topologies and does not restrict the use of devices to those under the same FortiCare account.