StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · IPsec VPNs

Practice question 432 of 440 · medium

Which two outer-WAN observations are relevant before diagnosing an IPsec cryptographic mismatch? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Whether a web-filter warning page appears on an unrelated browser.
  2. B.Whether the route description matches the site’s display name.
  3. C.Whether the local LAN DHCP scope has available leases, with both gateway WAN addresses already known.
  4. D.Whether UDP 500/4500 reaches the intended gateway and returns.
  5. E.Whether native ESP protocol 50 or required NAT-T transport is permitted by the underlay.
Show the answer and explanation

✓ Correct answers

  • Whether UDP 500/4500 reaches the intended gateway and returns.
  • Whether native ESP protocol 50 or required NAT-T transport is permitted by the underlay.

Confirm bidirectional endpoint/encapsulation transport before interpreting negotiation failure. Unrelated web UI behavior, names and an unrelated LAN allocation detail do not establish that the required outer packets cross the path.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.