NSE 4 – FortiGate 7.2 — Question 73

Which two features of IPsec IKEv1 authentication are supported by FortiGate? (Choose two.)

Answer options

• A. Extended authentication (XAuth) for faster authentication because fewer packets are exchanged
• B. Extended authentication (XAuth) to request the remote peer to provide a username and password
• C. No certificate is required on the remote peer when you set the certificate signature as the authentication method
• D. Pre-shared key and certificate signature as authentication methods

Correct answer: B, D

Explanation

Option B is correct as FortiGate supports Extended authentication (XAuth) which requests the remote peer for a username and password. Option D is also correct because FortiGate allows both pre-shared keys and certificate signatures for authentication. Options A and C are incorrect as they do not accurately reflect the capabilities of FortiGate concerning IKEv1 authentication.