FCP – FortiGate Administrator 7.4 — Question 85

Which two settings are required for SSL VPN to function between two FortiGate devices? (Choose two.)

Answer options

• A. The client FortiGate requires the SSL VPN tunnel interface type to connect SSL VPN.
• B. The server FortiGate requires a CA certificate to verify the client FortiGate certificate.
• C. The client FortiGate requires a client certificate signed by the CA on the server FortiGate.
• D. The client FortiGate requires a manually added route to remote subnets.

Correct answer: A, B

Explanation

Option A is correct because the client FortiGate must have the SSL VPN tunnel interface set up to establish the SSL VPN connection. Option B is also correct as the server FortiGate requires a CA certificate to validate the client FortiGate's certificate. Options C and D are not required for the SSL VPN functionality between the two devices, making them incorrect.