exam questions

Exam NSE7_EFW-7.0 All Questions

View all questions & answers for the NSE7_EFW-7.0 exam

Exam NSE7_EFW-7.0 topic 1 question 15 discussion

Actual exam question from Fortinet's NSE7_EFW-7.0
Question #: 15
Topic #: 1
[All NSE7_EFW-7.0 Questions]

Which statement about IKE and IKE NAT-T is true?

  • A. IKE is used to encapsulate ESP traffic in some situations, and IKE NAT-T is used only when the local FortiGate is using NAT on the IPsec interface.
  • B. IKE is the standard implementation for IKEv1 and IKE NAT-T is an extension added in IKEv2.
  • C. They both use UDP as their transport protocol and the port number is configurable.
  • D. They each use their own IP protocol number.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
caleidoscopio
1 month, 2 weeks ago
Answer: C IKE default port (500) IKE NAT-T default port (4500) Both ports can be configured.
upvoted 2 times
...
certifi46
2 months ago
Selected Answer: C
They both use UDP as their transport protocol and the port number is configurable
upvoted 1 times
...
Quetchup
3 months, 2 weeks ago
Selected Answer: C
Enterprise_Firewall_7.0_Study_Guide-Online.pdf p 414, 443
upvoted 2 times
...
Seph1
5 months, 1 week ago
C - is correct
upvoted 1 times
...
pcbbj
6 months ago
Selected Answer: C
IKE without NAT-T runs over UDP port 500. IKE with NAT-T runs over UDP port 4500. It can be configurable - https://docs.fortinet.com/document/fortigate/7.0.0/new-features/33578/configurable-ike-port
upvoted 4 times
...
johnnd
6 months, 1 week ago
Selected Answer: C
Also agree in C
upvoted 2 times
...
Hesoyam
6 months, 1 week ago
Selected Answer: C
The right answer is C.
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago