Fortinet Exam NSE4_FGT-6.4 Topic 8 Question 24 Discussion

Actual exam question for Fortinet's NSE4_FGT-6.4 exam

Question #: 24
Topic #: 8

[All NSE4_FGT-6.4 Questions]

What is the effect of enabling auto-negotiate on the phase 2 configuration of an IPsec tunnel?

AFortiGate automatically negotiates different local and remote addresses with the remote peer.

BFortiGate automatically negotiates a new security association after the existing security association expires.

CFortiGate automatically negotiates different encryption and authentication algorithms with the remote peer.

DFortiGate automatically brings up the IPsec tunnel and keeps it up, regardless of activity on the IPsec tunnel.

Show Suggested Answer

Suggested Answer: B

by Levi at May 09, 2022, 09:12 PM

Limited Time Offer

25%

Off

Get Premium NSE4_FGT-6.4 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

IscoFe

4 years ago

B is not correct since with Auto Negotiation it negotiates the SA before the current one expires. D is correct because of Quote "Another benefit of enabling Auto-negotiate is that the tunnel comes up and stays up automatically, even when there is no interesting traffic.

upvoted 1 times

...