StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · IPsec VPNs

Practice question 396 of 440 · medium

Phase 1 is established, but the peers have mismatched Phase 2 protected subnets and PFS settings. What does the Phase 1 success establish?

Choose the single best answer.

  1. A.The remote host firewall has accepted the ping.
  2. B.The IKE relationship is up, while Phase 2 can still fail independently.
  3. C.Every protected host is already authorized and reachable.
  4. D.All Phase 2 selectors have automatically been replaced with any-to-any.
Show the answer and explanation

✓ Correct answer

  • The IKE relationship is up, while Phase 2 can still fail independently.

An IKE relationship does not prove compatible traffic SAs, selectors, policy or host replies. Phase 2 must be negotiated successfully and forwarding dependencies verified. Phase 1 does not automatically widen selectors or configure hosts.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.