StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · IPsec VPNs

Practice question 392 of 440 · medium

Does a dialup client's dynamic WAN address by itself require IKEv1 Aggressive Mode?

Choose the single best answer.

  1. A.Every dynamic client address requires IKEv1 Aggressive Mode regardless of peer identification.
  2. B.Dynamic addressing alone does not determine the IKEv1 mode; peer identification matters. IKEv2 has no Main/Aggressive choice.
  3. C.Main Mode always identifies dynamic clients by their changing source IP, so peer IDs never matter.
  4. D.Changing from IKEv1 to IKEv2 preserves the Main/Aggressive Mode choice.
Show the answer and explanation

✓ Correct answer

  • Dynamic addressing alone does not determine the IKEv1 mode; peer identification matters. IKEv2 has no Main/Aggressive choice.

Dynamic addressing alone is not the deciding condition for IKEv1 mode; the peer-identification design matters. Neither automatic Aggressive Mode nor ignoring identity configuration follows from a changing address. IKEv2 does not use the Main/Aggressive choice.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.