# NSE7_EFW-70 — Question 425

**Type:** multiple_response
**Topics:** topic_1

## Question

Refer to the exhibits, which contain the partial configurations of two VPNs on FortiGate.
//IMG//

//IMG//

An administrator has configured two VPNs for two different user groups. Users who are in the Users-2 group are not able to connect to the VPN. After running a diagnostics command, the administrator discovered that FortiGate is not matching the user-2 VPN for members of the Users-2 group.
Which two changes must the administrator make to fix the issue? (Choose two.)

## Correct Answer

_See scenario._

## Explanation

Selected Answer: CD
"In case of multiple dialup VPN with PSK, the same local GW and the same SA settings, we have to use aggress. mode and different peer IDs" - Study Guide page 421

**Reference:** examtopics_top_comment

---
Source: https://hiexam.net/q/fortinet/NSE7_EFW-70/425  
Practice (tracked): https://hiexam.net/study/NSE7_EFW-70/practice