Fortinet
NSE4_FGT-7.0 · Question #20
NSE4_FGT-7.0 Question #20: Real Exam Question with Answer & Explanation
The correct answer is A: Phase 2 SAs are used for encrypting and decrypting the data exchanged through the tunnel.. See the full explanation below for the reasoning.
Question
Which three statements about security associations (SA) in IPsec are correct? (Choose three.)
Options
- APhase 2 SAs are used for encrypting and decrypting the data exchanged through the tunnel.
- BAn SA never expires.
- CA phase 1 SA is bidirectional, while a phase 2 SA is directional.
- DPhase 2 SA expiration can be time-based, volume-based, or both.
- EBoth the phase 1 SA and phase 2 SA are bidirectional.
Community Discussion
No community discussion yet for this question.