StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · IPsec VPNs

Practice question 402 of 440 · medium

An established VPN reaches its configured key lifetime. What should an administrator normally expect?

Choose the single best answer.

  1. A.Mandatory manual PSK entry before every subsequent packet.
  2. B.Permanent deletion of all LAN routes.
  3. C.Automatic disabling of ESP replay protection on both peers.
  4. D.Rekeying according to the negotiated relationship/settings.
Show the answer and explanation

✓ Correct answer

  • Rekeying according to the negotiated relationship/settings.

Key lifetimes control rekeying rather than recurring manual secret entry. Route deletion and automatic removal of protection are not the stated lifetime behavior. Inspect rekey compatibility if the tunnel fails at renewal.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.