In IKE Phase 1 negotiation, what does the Diffie-Hellman group determine?

The authentication method for the peers

The encryption algorithm used for data traffic

The strength of the key exchange algorithm used to derive shared keys

The lifetime of the IPsec security associations

In IKE Phase 2, what do traffic selectors define?

The IP addresses of the VPN gateways

The encryption and authentication algorithms used for the tunnel

The source and destination networks that the IPsec tunnel will protect

The lifetime of the IKE Phase 1 security association

In which scenario is IPsec transport mode typically used?

Site-to-site VPN between two FortiGate devices

End-to-end communication between two hosts, such as a client and a server

Remote access VPN for a mobile user

Connecting two branch offices over the internet

A company is configuring a site-to-site IPsec VPN and wants to use the strongest encryption and authentication algorithms available on FortiOS 7.6. Which combination should they choose?

AES-128 for encryption and MD5 for authentication

AES-256-GCM for encryption and authentication

DES for encryption and SHA-256 for authentication

3DES for encryption and SHA-1 for authentication

FortinetNSE 4 - FortiOS 7.6 Administrator

Domain 5Objective 1

IPsec VPN Concepts NSE4-FORTIOS-ADMINISTRATOR Practice Questions (Page 4)

Part of the VPNs domain, which accounts for 10-15% of the NSE4-FORTIOS-ADMINISTRATOR exam. Fortinet does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–9 in this domain), expect 1–2 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

9concepts

10-15%of the exam

Questions 16–20

16foundation · easy
In IKE Phase 1 negotiation, what does the Diffie-Hellman group determine?
Select an answer first
17foundation · easy
Which of the following is a valid authentication method for IKE Phase 1 in FortiOS?
Select an answer first
18foundation · easy
In IKE Phase 2, what do traffic selectors define?
Select an answer first
19foundation · easy
In which scenario is IPsec transport mode typically used?
Select an answer first
20application · medium
A company is configuring a site-to-site IPsec VPN and wants to use the strongest encryption and authentication algorithms available on FortiOS 7.6. Which combination should they choose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE4-FORTIOS-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE4-FORTIOS-ADMINISTRATOR” is a trademark of its owner, used for identification only.