StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · IPsec VPNs

Practice question 398 of 440 · medium

Several subnet pairs should share one authenticated gateway relationship. Which two statements support that configuration? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.phase1name references the firewall address-object folder.
  2. B.One broad selector automatically authorizes every covered service.
  3. C.Multiple Phase 2 definitions can reference one Phase 1.
  4. D.Each Phase 2 can express its own compatible protected selectors.
  5. E.Every subnet pair requires a different public WAN address by definition.
Show the answer and explanation

✓ Correct answers

  • Multiple Phase 2 definitions can reference one Phase 1.
  • Each Phase 2 can express its own compatible protected selectors.

Phase 2 definitions bind to the intended Phase 1 and can define different subnet pairs. Separate public IPs are not inherent, phase1name identifies the VPN relationship, and policy authorization still constrains the carried traffic.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.