NSE4 · Question #1
Which two statements are true about IPsec VPNs and SSL VPNs? (Choose two.)
The correct answer is A. SSL VPN creates a HTTPS connection. IPsec does not. D. Either a SSL VPN or an IPsec VPN can be established between an end-user workstation and a. SSL VPNs establish connections over HTTPS, unlike IPsec VPNs, and both VPN types can be used for end-user workstations connecting to a FortiGate. SSL VPN is primarily for remote access, while IPsec supports both remote access and site-to-site connections.
Question
Which two statements are true about IPsec VPNs and SSL VPNs? (Choose two.)
Options
- ASSL VPN creates a HTTPS connection. IPsec does not.
- BBoth SSL VPNs and IPsec VPNs are standard protocols.
- CEither a SSL VPN or an IPsec VPN can be established between two FortiGate devices.
- DEither a SSL VPN or an IPsec VPN can be established between an end-user workstation and a
How the community answered
(58 responses)- A86% (50)
- B5% (3)
- C9% (5)
Why each option
SSL VPNs establish connections over HTTPS, unlike IPsec VPNs, and both VPN types can be used for end-user workstations connecting to a FortiGate. SSL VPN is primarily for remote access, while IPsec supports both remote access and site-to-site connections.
SSL VPNs encapsulate traffic within the Secure Sockets Layer/Transport Layer Security (SSL/TLS) protocol, which typically operates over HTTPS (TCP port 443), while IPsec operates at the network layer and uses different protocols like ESP and AH.
While both SSL/TLS and IPsec are industry standards, this statement is less specific and foundational to the *operation* of the VPN types compared to A and D, which highlight key operational differences and common use cases.
SSL VPNs are primarily designed for remote access from individual clients to a network, not typically for site-to-site connections between two network devices like FortiGate units, where IPsec VPNs are the standard.
Both SSL VPNs (using a client or browser) and IPsec VPNs (using client software) are widely supported methods for an end-user workstation to establish a secure connection to a corporate network gateway like a FortiGate.
Concept tested: VPN types and their characteristics
Source: https://docs.fortinet.com/document/fortigate/7.4.0/fortios-handbook/479417/vpn-concepts
Topics
Community Discussion
No community discussion yet for this question.