exam questions

Exam NSE4_FGT-6.4 All Questions

View all questions & answers for the NSE4_FGT-6.4 exam

Exam NSE4_FGT-6.4 topic 1 question 75 discussion

Actual exam question from Fortinet's NSE4_FGT-6.4
Question #: 75
Topic #: 1
[All NSE4_FGT-6.4 Questions]

A network administrator is configuring a new IPsec VPN tunnel on FortiGate. The remote peer IP address is dynamic. In addition, the remote peer does not support a dynamic DNS update service.
What type of remote gateway should the administrator configure on FortiGate for the new IPsec VPN tunnel to work?

  • A. Static IP Address
  • B. Dialup User
  • C. Dynamic DNS
  • D. Pre-shared Key
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
phototrait
Highly Voted 3 years, 10 months ago
B is correct. FortiGate_Infrastructure_6.4 page 220 - The remote peer IP Address is dynamic, not static
upvoted 22 times
...
FortiSherlock
Highly Voted 3 years, 8 months ago
"Dialup user is used when the remote peer's IP address is unknown. The remote peer whose IP address is unknown acts as the dialup clien and this is often the case for branch offices and mobile VPN clients that use dynamic IP address and no dynamic DNS." I would configure Dialup User on the FortiGate and Static IP Address on the Remote Site. I do not think C makes any sense if the question explicitly says that the remote peer does not support dynamic DNS update service.
upvoted 6 times
...
Rian
Most Recent 1 year, 7 months ago
A. Static IP Address.
upvoted 1 times
...
NicolaeEast
2 years, 8 months ago
Selected Answer: B
Fortigate Infrastructure 7.0 pg 211 "Use dialup user when the remote peer IP address is unknown."
upvoted 1 times
...
Ouma
2 years, 8 months ago
Selected Answer: B
B is correct
upvoted 1 times
...
J_Olin
2 years, 8 months ago
NSE4_FGT-7.0 - B is correct - FortiGate_Infrastructure_7.0 page 225
upvoted 1 times
...
Patrick1234
3 years, 1 month ago
Selected Answer: B
B is right
upvoted 1 times
...
Nirvanero94
3 years, 2 months ago
Selected Answer: B
B es correcta
upvoted 1 times
...
lauclint
3 years, 3 months ago
Selected Answer: B
Dialup VPN tunnels are used when the remote VPN gateway or remote VPN client IP address is dynamic and therefore unknown.
upvoted 1 times
...
Gilmarcio
3 years, 5 months ago
c - is correct https://community.fortinet.com/t5/FortiGate/Technical-Tip-IPsec-VPN-between-static-and-dynamic-IP-FQDN/ta-p/191815
upvoted 1 times
...
forti_Ctes
3 years, 7 months ago
B is correct
upvoted 2 times
...
MSAU
3 years, 8 months ago
Has to be B.
upvoted 1 times
...
HT_TNT
3 years, 9 months ago
Hi guys, does anyone have the lastest file who can share?
upvoted 3 times
Gilmig
3 years, 9 months ago
if you got it share it please
upvoted 2 times
...
...
LensRevs
3 years, 9 months ago
It's confuse , what about "the remote peer does not support a DDNS update service"?
upvoted 1 times
...
xela2005
3 years, 10 months ago
Correct Answer: C B is not correct. Because Dialup user is used when the remote peer`s IP address us unkown. The remote peer whose IP address is unknow acts as the dialup client, and this is often the case for Branch offices and mobile VPN clients that use Dynamic IP address, and no Dynamic DNS. C Is correct answer. Static IP address or Dynamic DNS are used when you know the remote peers’s address. If you select static IP address, then you nedd to provide an IP address. If you select Dynamic DNS, then you need to provide a fully qualifield domain name (FQDN) C is correct. FortiGate_Infrastructure_6.4 page 219
upvoted 2 times
2021gene
3 years, 8 months ago
It can´t be C because it states that the remote peer doesnt support Dynamic DNS. It also says that the peer Ip is dynamic, that means that it changes from time to time, so you need to consider as unknow, otherwise you should change your side configuration each time the peer Ip changes,
upvoted 2 times
...
cessyang
3 years, 9 months ago
i think it's Dialup ( B ) in the diagram on that page the "left side map" of the users are "dialup clients" the diagram on the right show "Remote peers" with IP that are set by the FQDN. (A & C) also in the line it says "....use Dynamic IP address, and no Dynamic DNS...." so you would set the IPsec VPN as dial up. the question says "remote peer IP address is dynamic and not support dynamic DNS." so the vpn will be a dialup. hope that make sense.
upvoted 8 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago