StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · IPsec VPNs

Practice question 407 of 440 · medium

Which two statements distinguish new initiation from stateful replies across a VPN? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Every reply needs a new unrelated outbound-initiation policy match.
  2. B.An accepted IKE event authorizes every user application.
  3. C.A reverse policy automatically repairs Phase 2 cryptographic incompatibility.
  4. D.A tunnel-to-LAN policy can authorize independent remote initiation.
  5. E.Replies belonging to an existing accepted session use stateful handling.
Show the answer and explanation

✓ Correct answers

  • A tunnel-to-LAN policy can authorize independent remote initiation.
  • Replies belonging to an existing accepted session use stateful handling.

Policy direction governs independent initiation, while session state handles permitted replies. IKE success is not user authorization, and a forwarding policy does not repair incompatible Phase 2 parameters.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.