FortinetFortinet
NSE4 · Question #530
NSE4 Question #530: Real Exam Question with Answer & Explanation
Sign in or unlock NSE4 to reveal the answer and full explanation for question #530. The question stem and answer options stay visible for context.
Submitted by zhang_li· Apr 18, 2026VPN and Routing
Question
What action does an IPsec Gateway take with the user traffic routed to an IPsec VPN when it does not match any phase 2 quick mode selector?
Options
- ATraffic is dropped
- BTraffic is routed across the default phase 2.
- CTraffic is routed to the next available route in the routing table.
- DTraffic is routed unencrypted to the interface where the IPsec VPN is terminating.
Unlock NSE4 to see the answer
You've previewed enough free NSE4 questions. Unlock NSE4 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#IPsec VPN#Phase 2 Selector#Traffic Handling#FortiGate VPN