Exam NSE4_FGT-6.4 topic 1 question 3 discussion

Actual exam question from Fortinet's NSE4_FGT-6.4

Question #: 3
Topic #: 1

[All NSE4_FGT-6.4 Questions]

Which two statements about IPsec authentication on FortiGate are correct? (Choose two.)

A. For a stronger authentication, you can also enable extended authentication (XAuth) to request the remote peer to provide a username and password.
B. FortiGate supports pre-shared key and signature as authentication methods.
C. Enabling XAuth results in a faster authentication because fewer packets are exchanged.
D. A certificate is not required on the remote peer when you set the signature as the authentication method.

Show Suggested Answer

Suggested Answer: AB 🗳️
Reference:
https://docs.fortinet.com/document/fortigate/6.0.0/handbook/100552/using-xauth-authentication

by MunzerR at April 3, 2021, 12:22 a.m.

Comments

Submit Cancel

MunzerR

Highly Voted 4 years, 2 months ago

A,B are correct

upvoted 10 times

...

Lionardo

Highly Voted 4 years, 2 months ago

A & B correct. FortiGate_Infrastructure_6.4 page 224 for B and page 227 for A

upvoted 8 times

...

sysengineer

Most Recent 6 months ago

Selected Answer: AB

A. Extended Authentication (XAuth): XAuth can be enabled to request the remote peer to provide additional authentication credentials (such as a username and password), enhancing the security of the IPsec VPN. B. Supported Authentication Methods: FortiGate supports pre-shared keys (PSK) and digital signatures (certificate-based authentication) as the main authentication methods for IPsec.

upvoted 1 times

...

alpha520

2 years, 9 months ago

A,B correct

upvoted 1 times

...

atiles05

2 years, 10 months ago

Selected Answer: AB

The correct answers are: A,B A = Fortigate_Infrastructure_7.0 page 218 B = Fortigate_Infrastructure_7.0 page 215 ---Español--- Las respuestas correctas son: A,B A = Fortigate_Infrastructure_7.0 página 218 B = Fortigate_Infrastructure_7.0 página 215

upvoted 1 times

...