StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · IPsec VPNs

Practice question 395 of 440 · hard

Which requirements apply to certificate-authenticated VPN peers? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Appropriate certificate/private-key identities and acceptable peer authentication settings.
  2. B.Trust in the relevant issuing CA and required certificate validation.
  3. C.Identical preshared keys are mandatory in every certificate-only design.
  4. D.Trusting an unrelated browser inspection CA automatically validates every VPN peer.
  5. E.Disabling certificate validation proves the intended gateway identity.
Show the answer and explanation

✓ Correct answers

  • Appropriate certificate/private-key identities and acceptable peer authentication settings.
  • Trust in the relevant issuing CA and required certificate validation.

Certificate authentication needs usable identities/keys and valid trust/peer checks. A certificate-only design does not universally require a PSK. An unrelated inspection CA or disabled validation does not establish the intended VPN peer identity.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.