nerdexam
Fortinet

NSE4 · Question #456

Which of the following authentication methods are supported in an IPsec phase 1? (Choose two.)

The correct answer is C. RSA signature D. Pre-shared keys. IPsec Phase 1 authentication supports Pre-shared Keys (PSK) for symmetric key exchange and RSA signatures, which leverage digital certificates for asymmetric authentication.

Submitted by femi9· Apr 18, 2026VPN and Routing

Question

Which of the following authentication methods are supported in an IPsec phase 1? (Choose two.)

Options

  • AAsymmetric Keys
  • BCA root digital certificates
  • CRSA signature
  • DPre-shared keys

How the community answered

(50 responses)
  • A
    8% (4)
  • B
    4% (2)
  • C
    88% (44)

Why each option

IPsec Phase 1 authentication supports Pre-shared Keys (PSK) for symmetric key exchange and RSA signatures, which leverage digital certificates for asymmetric authentication.

AAsymmetric Keys

While RSA signature authentication uses asymmetric key cryptography, 'Asymmetric Keys' is a broad cryptographic concept rather than a specific, named authentication method directly configured in IPsec Phase 1.

BCA root digital certificates

CA root digital certificates are essential for establishing the trust chain when using certificate-based authentication (like RSA signatures), but they are not the authentication *method* itself; they enable the trust in the peer's certificate.

CRSA signatureCorrect

RSA signature authentication is a method used in IPsec Phase 1 where peers authenticate by signing data with their private RSA key, verifiable by the other peer's public key obtained from a digital certificate.

DPre-shared keysCorrect

Pre-shared keys (PSK) are a common and straightforward authentication method for IPsec Phase 1, requiring both communicating peers to be configured with the exact same secret key.

Concept tested: IPsec Phase 1 authentication methods

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/453198/ipsec-vpn

Topics

#IPsec#Phase 1 Authentication#Pre-shared Keys#RSA Signatures

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice