Which Phase 2 setting on a FortiGate site-to-site IPsec VPN defines the traffic that will be protected by the tunnel?

Local and remote subnets (proxy IDs)

Dead peer detection (DPD) interval

A site-to-site IPsec tunnel is down. The administrator runs 'diag debug application ike -1' and 'diag debug enable' and sees the following output: 'IKE: Received Informational Message: NO_PROPOSAL_CHOSEN'. What does this indicate?

The phase 2 selector is too broad

The pre-shared key is incorrect

The remote gateway is unreachable

The phase 1 or phase 2 proposal does not match between the peers

An administrator is configuring a site-to-site IPsec VPN on a FortiGate. The remote peer is behind a NAT device. The administrator has configured the phase 1 interface with the remote gateway's public IP address. What additional phase 1 setting is required for the tunnel to establish successfully?

Increase the dead peer detection interval

Set the local ID to the FortiGate's interface IP address

Set the phase 1 proposal to AES128-SHA1

In a FortiGate site-to-site IPsec VPN configuration, which settings are defined in Phase 1?

Local and remote subnets, and the proxy ID

The tunnel interface name and the routing protocol

Encryption algorithm, authentication method, and pre-shared key

The IPsec SA lifetime and the perfect forward secrecy (PFS) setting

A FortiGate IPsec VPN fails to establish. Which command would you use to view real-time IKE negotiation messages?

show vpn ipsec phase1-interface

diagnose sniffer packet any 'host 10.0.0.1' 4

FortinetNSE 4 - FortiOS 7.6 Administrator

Domain 5Objective 4

IPsec VPNs and Review Logs NSE4-FORTIOS-ADMINISTRATOR Practice Questions (Page 1)

Part of the VPNs domain, which accounts for 10-15% of the NSE4-FORTIOS-ADMINISTRATOR exam. Fortinet does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–9 in this domain), expect 1–2 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

4concepts

10-15%of the exam

Questions 1–5

1foundation · easy
Which Phase 2 setting on a FortiGate site-to-site IPsec VPN defines the traffic that will be protected by the tunnel?
Select an answer first
2application · medium
A site-to-site IPsec tunnel is down. The administrator runs 'diag debug application ike -1' and 'diag debug enable' and sees the following output: 'IKE: Received Informational Message: NO_PROPOSAL_CHOSEN'. What does this indicate?
Select an answer first
3application · medium
An administrator is configuring a site-to-site IPsec VPN on a FortiGate. The remote peer is behind a NAT device. The administrator has configured the phase 1 interface with the remote gateway's public IP address. What additional phase 1 setting is required for the tunnel to establish successfully?
Select an answer first
4foundation · easy
In a FortiGate site-to-site IPsec VPN configuration, which settings are defined in Phase 1?
Select an answer first
5foundation · easy
A FortiGate IPsec VPN fails to establish. Which command would you use to view real-time IKE negotiation messages?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE4-FORTIOS-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE4-FORTIOS-ADMINISTRATOR” is a trademark of its owner, used for identification only.