FCP_FGT_AD-7.4 · Question #92
Refer to the exhibit. A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come…
The correct answer is C. On HQ-FortiGate, set Encryption to AES256. D. On Remote-FortiGate, set Remote Address to 10.0.1.0/255.255.255.0. Exam Questions, Study Guides, Practice Tests. Lead the way to help you pass any IT Certification exams, 100% Pass Guaranteed or Full Refund. Especially Cisco, Microsoft, CompTIA, Citrix, EMC, HP, Oracle, VMware, Juniper, Check Point, LPI, Nortel, EXIN and so on. Our Slogan…
Question
Refer to the exhibit. A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come up. Based on the phase 2 configuration shown in the exhibit, which two configuration changes will bring phase 2 up? (Choose two.)
Exhibit
Options
- AOn Remote-FortiGate, set Seconds to 43200.
- BOn HQ-FortiGate, enable Diffie-Hellman Group 2.
- COn HQ-FortiGate, set Encryption to AES256.
- DOn Remote-FortiGate, set Remote Address to 10.0.1.0/255.255.255.0.
How the community answered
(25 responses)- A8% (2)
- B16% (4)
- C76% (19)
Explanation
Exam Questions, Study Guides, Practice Tests. Lead the way to help you pass any IT Certification exams, 100% Pass Guaranteed or Full Refund. Especially Cisco, Microsoft, CompTIA, Citrix, EMC, HP, Oracle, VMware, Juniper, Check Point, LPI, Nortel, EXIN and so on. Our Slogan: First Test, First Pass. Help you to pass any IT Certification exams at the first try. You can reach us at any of the email addresses listed below. Any problems about IT certification or our products, you could rely upon us, we will give you satisfactory answers in 24 hours.
Topics
Community Discussion
No community discussion yet for this question.
