NSE 4 – FortiGate 6.2 — Question 82

An administrator needs to strengthen the security for SSL VPN access.
Which three statements are best practices to do so? (Choose three.)

Answer options

• A. Configure a client integrity check (host-check)
• B. Configure two-factor authentication using security certificates.
• C. Configure split tunneling
• D. Configure host restrictions by IP address or by MAC address.
• E. Configure SSL offloading to a content processor.

Correct answer: A, B, D

Explanation

The correct answers, A, B, and D, focus on verifying the security of the client and implementing additional authentication measures, which are essential for enhancing SSL VPN security. Option C, split tunneling, can actually weaken security by allowing some traffic to bypass the VPN, while option E, SSL offloading, does not specifically improve access security for the VPN itself.