Exam NSE4_FGT-6.4 All Questions

View all questions & answers for the NSE4_FGT-6.4 exam

Exam NSE4_FGT-6.4 topic 1 question 75 discussion

Actual exam question from Fortinet's NSE4_FGT-6.4

Question #: 75
Topic #: 1

A network administrator is configuring a new IPsec VPN tunnel on FortiGate. The remote peer IP address is dynamic. In addition, the remote peer does not support a dynamic DNS update service.
What type of remote gateway should the administrator configure on FortiGate for the new IPsec VPN tunnel to work?

A. Static IP Address
B. Dialup User
C. Dynamic DNS
D. Pre-shared Key

Show Suggested Answer

Suggested Answer: B 🗳️

by phototrait at June 30, 2021, 6:44 p.m.

Comments

Submit Cancel

phototrait

Highly Voted 3 years, 11 months ago

B is correct. FortiGate_Infrastructure_6.4 page 220 - The remote peer IP Address is dynamic, not static

upvoted 22 times

...

FortiSherlock

Highly Voted 3 years, 10 months ago

"Dialup user is used when the remote peer's IP address is unknown. The remote peer whose IP address is unknown acts as the dialup clien and this is often the case for branch offices and mobile VPN clients that use dynamic IP address and no dynamic DNS." I would configure Dialup User on the FortiGate and Static IP Address on the Remote Site. I do not think C makes any sense if the question explicitly says that the remote peer does not support dynamic DNS update service.

upvoted 6 times

...

Rian

Most Recent 1 year, 9 months ago

A. Static IP Address.

upvoted 1 times

...

NicolaeEast

2 years, 10 months ago

Selected Answer: B

Fortigate Infrastructure 7.0 pg 211 "Use dialup user when the remote peer IP address is unknown."

upvoted 1 times

...

Ouma

2 years, 10 months ago

Selected Answer: B

B is correct

upvoted 1 times

...

J_Olin

2 years, 10 months ago

NSE4_FGT-7.0 - B is correct - FortiGate_Infrastructure_7.0 page 225

upvoted 1 times

...

Patrick1234

3 years, 3 months ago

Selected Answer: B

B is right

upvoted 1 times

...

Nirvanero94

3 years, 3 months ago

Selected Answer: B

B es correcta

upvoted 1 times

...

lauclint

3 years, 5 months ago

Selected Answer: B

Dialup VPN tunnels are used when the remote VPN gateway or remote VPN client IP address is dynamic and therefore unknown.

upvoted 1 times

...

Gilmarcio

3 years, 6 months ago

c - is correct https://community.fortinet.com/t5/FortiGate/Technical-Tip-IPsec-VPN-between-static-and-dynamic-IP-FQDN/ta-p/191815

upvoted 1 times

...

forti_Ctes

3 years, 9 months ago

B is correct

upvoted 2 times

...

MSAU

3 years, 10 months ago

Has to be B.

upvoted 1 times

...

HT_TNT

3 years, 11 months ago

Hi guys, does anyone have the lastest file who can share?

upvoted 3 times

Gilmig

3 years, 11 months ago

if you got it share it please

upvoted 2 times

...

LensRevs

3 years, 11 months ago

It's confuse , what about "the remote peer does not support a DDNS update service"?

upvoted 1 times

...

xela2005

3 years, 11 months ago

Correct Answer: C B is not correct. Because Dialup user is used when the remote peer`s IP address us unkown. The remote peer whose IP address is unknow acts as the dialup client, and this is often the case for Branch offices and mobile VPN clients that use Dynamic IP address, and no Dynamic DNS. C Is correct answer. Static IP address or Dynamic DNS are used when you know the remote peers’s address. If you select static IP address, then you nedd to provide an IP address. If you select Dynamic DNS, then you need to provide a fully qualifield domain name (FQDN) C is correct. FortiGate_Infrastructure_6.4 page 219

upvoted 2 times

2021gene

3 years, 9 months ago

It can´t be C because it states that the remote peer doesnt support Dynamic DNS. It also says that the peer Ip is dynamic, that means that it changes from time to time, so you need to consider as unknow, otherwise you should change your side configuration each time the peer Ip changes,

upvoted 2 times

...

cessyang

3 years, 11 months ago

i think it's Dialup ( B ) in the diagram on that page the "left side map" of the users are "dialup clients" the diagram on the right show "Remote peers" with IP that are set by the FQDN. (A & C) also in the line it says "....use Dynamic IP address, and no Dynamic DNS...." so you would set the IPsec VPN as dial up. the question says "remote peer IP address is dynamic and not support dynamic DNS." so the vpn will be a dialup. hope that make sense.

upvoted 8 times

...