StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · IPsec VPNs

Practice question 428 of 440 · medium

Which two records/evidence sets answer different VPN operational questions? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.A successful FortiGate GUI login proves tunnel-to-LAN authorization.
  2. B.A NAT keepalive proves the protected database query completed.
  3. C.VPN events show negotiation, SA and DPD changes.
  4. D.Forward traffic logs show protected user-session policies/actions.
  5. E.An SA-up event proves the application server returned the requested file.
Show the answer and explanation

✓ Correct answers

  • VPN events show negotiation, SA and DPD changes.
  • Forward traffic logs show protected user-session policies/actions.

VPN and traffic evidence must be correlated because they describe different layers. SA readiness, local GUI reachability and translation keepalives do not establish a protected application response.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.