StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · IPsec VPNs

Practice question 387 of 440 · easy

A translation device sits between two VPN gateways. NAT is detected and NAT-T is enabled. Which outer transport should be considered for protected traffic?

Choose the single best answer.

  1. A.UDP port 50 because ESP has protocol number 50.
  2. B.AH encapsulation automatically replacing ESP.
  3. C.UDP 4500 encapsulation.
  4. D.Only TCP 443 for every IPsec tunnel.
Show the answer and explanation

✓ Correct answer

  • UDP 4500 encapsulation.

NAT-T encapsulates ESP in UDP 4500 when required. Native protocol numbers are not UDP port assignments. TCP 443 is not the stated IPsec transport, and NAT traversal does not change FortiOS into AH support.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.