StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · IPsec VPNs

Practice question 409 of 440 · medium

IKE establishes even though no LAN-to-tunnel accepting policy has been created. Which conclusion is correct?

Choose the single best answer.

  1. A.Endpoint negotiation can succeed while user forwarding remains unauthorized.
  2. B.Phase 1 success proves an invisible LAN allow policy must exist.
  3. C.The wizard must have disabled all firewall permission checks.
  4. D.The tunnel must be using AH because ESP requires a forward policy before IKE.
Show the answer and explanation

✓ Correct answer

  • Endpoint negotiation can succeed while user forwarding remains unauthorized.

IKE terminates at the VPN gateways, separate from transit LAN payload permission. Missing forward policy can block user traffic without preventing Phase 1. There is no implied hidden allow policy, permission bypass or AH support.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.