Fortinet Exam FCP_FGT_AD-7.6 Topic 3 Question 8 Discussion

Actual exam question for Fortinet's FCP_FGT_AD-7.6 exam

Question #: 8
Topic #: 3

[All FCP_FGT_AD-7.6 Questions]

You are analyzing connectivity problems caused by intermediate devices blocking traffic in SSL VPN environment.

In which two ways can you effectively resolve the problem? (Choose two.)

AYou can turn off IKE fragmentation to fix large certificate negotiation problems.

BYou should use IPsec to solve issues with fragment drops and large certificate exchanges.

CYou can use SSL VPN tunnel mode to prevent problems with blocked ESP and UDP ports (500 or 4500).

DYou can configure a hub-and-spoke topology with SSL VPN tunnels to bypass blocked UDP ports.

Show Suggested Answer

Suggested Answer: A, C

Disabling IKE fragmentation helps resolve issues caused by intermediate devices blocking large fragmented packets during certificate negotiation.

Using SSL VPN tunnel mode encapsulates traffic over HTTPS, bypassing blocks on ESP and UDP ports commonly used by IPsec.

by Micaela at Aug 02, 2025, 11:19 AM

Limited Time Offer

25%

Off

Get Premium FCP_FGT_AD-7.6 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Dorinda

20 hours ago

I think options C and D are the way to go. Turning off IKE fragmentation won't help with large certificate issues, and IPsec isn't the right solution for an SSL VPN environment.

upvoted 0 times

...