NSE4_FGT Question 71

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 1

  C. On HQ-FortiGate, set Encryption to AES256.

• Chose C1

  C. On HQ-FortiGate, set Encryption to AES256. FortiGate Infrastructure 7.2 Study Guide (p.263): "A phase 2 proposal defines the algorithms supported by the peer for encrypting and decrypting the data over the tunnel. You can configure multiple proposals to offer more options to the remote peer when negotiating the IPsec SAs. Like in phase 1, you need to select a combination of encryption and authentication algorithms." Reference and download study guide: https://ebin.pub/fortinet-fortigate-infrastructure-study-guide-for-fortios-72.html

• 1

  C, change to 256 to match remote ipsec