Exam NSE7_LED-7.0 topic 1 question 48 discussion

Actual exam question from Fortinet's NSE7_LED-7.0

Question #: 48
Topic #: 1

Refer to the exhibit.

Examine the IPsec VPN phase 1 configuration shown in the exhibit.

An administrator wants to use certificate-based authentication for an IPsec VPN user.

Which three configuration changes must you make on FortiGate to perform certificate-based authentication for the IPsec VPN user? (Choose three.)

A. Create a PKI user for the IPsec VPN user, and then configure the IPsec VPN tunnel to accept the PKI user as peer certificate.
B. In the IKE section of the IPsec VPN tunnel, in the Mode field, select Main (ID protection).
C. Import the CA that signed the user certificate.
D. Enable XAUTH on the IPsec VPN tunnel.
E. In the Authentication section of the IPsec VPN tunnel, in the Method drop-down list, select Signature, and then select the certificate that FortiGate will use for IPsec VPN.

Show Suggested Answer

Suggested Answer: ACE 🗳️

by gbrodrigues at Feb. 21, 2025, 12:28 a.m.

Comments

Submit Cancel

Marcheard

1 month, 3 weeks ago

Selected Answer: ACE

https://docs.fortinet.com/document/fortigate/7.0.17/administration-guide/443323/dialup-ipsec-vpn-with-certificate-authentication

upvoted 2 times

...

gbrodrigues

2 months, 1 week ago

Selected Answer: CDE

CDE are true.

upvoted 1 times

pmanglaviti

1 month, 1 week ago

D. is incorrect, as XAUTH should specifically be disabled.

upvoted 1 times

...

Exam NSE7_LED-7.0 All Questions

View all questions & answers for the NSE7_LED-7.0 exam

Exam NSE7_LED-7.0 topic 1 question 48 discussion

Comments

Marcheard

gbrodrigues

pmanglaviti

SY0-701