StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · IPsec VPNs

Practice question 389 of 440 · medium

A design performs key agreement but does not validate the expected VPN peer identity. What security purpose is still missing?

Choose the single best answer.

  1. A.Authenticating who participates in the key agreement.
  2. B.Measuring path latency instead of checking peer credentials.
  3. C.Making every packet’s source port identical.
  4. D.Generating an internet default route on both gateways.
Show the answer and explanation

✓ Correct answer

  • Authenticating who participates in the key agreement.

Key agreement and peer authentication solve different problems. Authentication establishes that the intended peer participates. Latency measurement, fixed source ports and default routes cannot supply cryptographic peer identity.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.