NSE 4 – FortiGate 5.4 — Question 12

Which statements about an IPv6-over-IPv4 IPsec configuration are correct? (Choose two.)

Answer options

• A. The remote gateway IP must be an IPv6 address.
• B. The source quick mode selector must be an IPv4 address.
• C. The local gateway IP must an IPv4 address.
• D. The destination quick mode selector must be an IPv6 address.

Correct answer: C, D

Explanation

The correct answers are C and D because in an IPv6-over-IPv4 configuration, the local gateway must indeed be an IPv4 address to establish the tunnel, while the destination quick mode selector must be an IPv6 address to appropriately target the traffic. Options A and B are incorrect since the remote gateway IP is not required to be IPv6 and the source quick mode selector is typically an IPv6 address in this context.