Fortinet
FCNSP · Question #104
Review the IPsec Phase2 configuration shown in the Exhibit; then answer the question following it. Which of the following statements are correct regarding this configuration? (Select all that apply).
The correct answer is A. The Phase 2 will re-key even if there is no traffic. B. There will be a DH exchange for each re-key. See the full explanation below for the reasoning.
Question
Review the IPsec Phase2 configuration shown in the Exhibit; then answer the question following it. Which of the following statements are correct regarding this configuration? (Select all that apply).
Exhibit
Options
- AThe Phase 2 will re-key even if there is no traffic.
- BThere will be a DH exchange for each re-key.
- CThe sequence number of ESP packets received from the peer will not be checked.
- DQuick mode selectors will default to those used in the firewall policy.
How the community answered
(44 responses)- A70% (31)
- C9% (4)
- D20% (9)
Community Discussion
No community discussion yet for this question.