StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · IPsec VPNs

Practice question 385 of 440 · easy

An administrator wants an IPsec tunnel using AH instead of ESP on FortiOS. Which statement correctly describes the supported choice?

Choose the single best answer.

  1. A.FortiOS IPsec uses ESP and does not support AH as a selectable tunnel protocol.
  2. B.AH is supported whenever NAT-T is disabled.
  3. C.AH becomes available only when the firewall policy ID is 50.
  4. D.AH is another name for UDP 4500 encapsulation.
Show the answer and explanation

✓ Correct answer

  • FortiOS IPsec uses ESP and does not support AH as a selectable tunnel protocol.

FortiOS supports ESP for IPsec VPN rather than AH. Disabling NAT-T does not add AH support; policy numbering is unrelated. UDP 4500 is NAT traversal transport, not the AH protection protocol.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.