StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · IPsec VPNs

Practice question 401 of 440 · medium

A backup tunnel should have its traffic SAs ready before user traffic needs it. Which two points are correct? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Backup selectors, proposals and policies still need to be validated with real traffic.
  2. B.auto-negotiate automatically allows any LAN service.
  3. C.auto-negotiate changes IKEv2 into IKEv1 Aggressive Mode.
  4. D.A ready SA proves the remote application returned data.
  5. E.Phase 2 auto-negotiate can initiate/maintain negotiation without waiting for user traffic.
Show the answer and explanation

✓ Correct answers

  • Backup selectors, proposals and policies still need to be validated with real traffic.
  • Phase 2 auto-negotiate can initiate/maintain negotiation without waiting for user traffic.

Auto-negotiate improves SA readiness, while a useful backup still depends on compatibility and forwarding. It does not grant service authorization, change IKE version/mode or establish that a remote application responded.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.