nerdexam
Fortinet

NSE4 · Question #1

Which two statements are true about IPsec VPNs and SSL VPNs? (Choose two.)

The correct answer is A. SSL VPN creates a HTTPS connection. IPsec does not. D. Either a SSL VPN or an IPsec VPN can be established between an end-user workstation and a. SSL VPNs establish connections over HTTPS, unlike IPsec VPNs, and both VPN types can be used for end-user workstations connecting to a FortiGate. SSL VPN is primarily for remote access, while IPsec supports both remote access and site-to-site connections.

Submitted by certguy· Apr 18, 2026VPN and ZTNA

Question

Which two statements are true about IPsec VPNs and SSL VPNs? (Choose two.)

Options

  • ASSL VPN creates a HTTPS connection. IPsec does not.
  • BBoth SSL VPNs and IPsec VPNs are standard protocols.
  • CEither a SSL VPN or an IPsec VPN can be established between two FortiGate devices.
  • DEither a SSL VPN or an IPsec VPN can be established between an end-user workstation and a

How the community answered

(58 responses)
  • A
    86% (50)
  • B
    5% (3)
  • C
    9% (5)

Why each option

SSL VPNs establish connections over HTTPS, unlike IPsec VPNs, and both VPN types can be used for end-user workstations connecting to a FortiGate. SSL VPN is primarily for remote access, while IPsec supports both remote access and site-to-site connections.

ASSL VPN creates a HTTPS connection. IPsec does not.Correct

SSL VPNs encapsulate traffic within the Secure Sockets Layer/Transport Layer Security (SSL/TLS) protocol, which typically operates over HTTPS (TCP port 443), while IPsec operates at the network layer and uses different protocols like ESP and AH.

BBoth SSL VPNs and IPsec VPNs are standard protocols.

While both SSL/TLS and IPsec are industry standards, this statement is less specific and foundational to the *operation* of the VPN types compared to A and D, which highlight key operational differences and common use cases.

CEither a SSL VPN or an IPsec VPN can be established between two FortiGate devices.

SSL VPNs are primarily designed for remote access from individual clients to a network, not typically for site-to-site connections between two network devices like FortiGate units, where IPsec VPNs are the standard.

DEither a SSL VPN or an IPsec VPN can be established between an end-user workstation and aCorrect

Both SSL VPNs (using a client or browser) and IPsec VPNs (using client software) are widely supported methods for an end-user workstation to establish a secure connection to a corporate network gateway like a FortiGate.

Concept tested: VPN types and their characteristics

Source: https://docs.fortinet.com/document/fortigate/7.4.0/fortios-handbook/479417/vpn-concepts

Topics

#VPN Technologies#IPsec VPN#SSL VPN#VPN Use Cases

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice