Fortinet
NSE4_FGT-6.4 · Question #70
Refer to the exhibit. A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up. but phase 2 fails to come…
The correct answer is D. On HQ-FortiGate, set Encryption to AES256. See the full explanation below for the reasoning.
Question
Refer to the exhibit. A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up. but phase 2 fails to come up. Based on the phase 2 configuration shown in the exhibit, what configuration change will bring phase 2 up?
Exhibit
Options
- AOn HQ-FortiGate,enable Auto-negotiate.
- BOn Remote-FortiGate, set Seconds to 43200.
- COn HQ-FortiGate,enable Diffie-Hellman Group 2.
- DOn HQ-FortiGate, set Encryption to AES256.
How the community answered
(27 responses)- A4% (1)
- B4% (1)
- C7% (2)
- D85% (23)
Community Discussion
No community discussion yet for this question.