View all questions & answers for the NSE 6 - Network Security 7.6 Support Engineer Materials exam

NSE 6 - Network Security 7.6 Support Engineer Materials - Question #84 Discussion

Comment Image Comment Image Comment Image

Which statement about IKE and IKE NAT-T is true? (Choose one answer)

  • A. IKE is used to encapsulate ESP traffic in some situations, and IKE NAT-T is used only when the local FortiGate is using NAT on the IPsec interface.
  • B. IKE is the standard implementation for IKEv1 and IKE NAT-T is an extension added in IKEv2.
  • C. They each use their own IP protocol number.
  • D. They both use UDP as their transport protocol and the port number is configurable.
Correct Answer: D

Brave-Dump Community Votes

Answer: D (3 votes) 75%
Answer: C (1 vote) 25%

Community Explanations & Comments (4)

Mohammed Khaled 11 months ago
Selected: C
I think the correct answer would be "C" as port 500 and port 4500 are stander ports. and IKE and NAT-T are using different protocol number indeed, ESP 50 or 51 AH. and IKE uses UDP port 500
Mohammed Khaled 11 months ago
sorry nat-t uses 4500 port, forgot to mention.
Adam 9 months ago
IKE -> IP Protocol Number 17 for UDP -> UDP 500 NAT-T -> IP Protocol Number 17 for UDP -> UDP 4500 ESP -> IP Protocol Number 50 IKE and NAT-T use same IP Protocol Number 17. C is wrong.
James 9 months ago
Selected: D
study guide page 339
Mehdi 8 months ago
Selected: D
C is incorrect IKE (with or without NAT-T) uses UDP (not its own IP protocol number). ESP uses IP protocol 50
Anonymous User 6 months ago
Selected: D
study guide 340