NSE4_FGT-7.0 · Question #151
Refer to the exhibit. A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 fails to come up. The administrator has al
Sign in or unlock NSE4_FGT-7.0 to reveal the answer and full explanation for question #151. The question stem and answer options stay visible for context.
Question
Refer to the exhibit. A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 fails to come up. The administrator has also re-entered the pre- shared key on both FortiGate devices to make sure they match. Based on the phase 1 configuration and the diagram shown in the exhibit, which two configuration changes will bring phase 1 up? (Choose two.)
Exhibit
Options
- AOn HQ-FortiGate, set IKE mode to Main (ID protection).
- BOn both FortiGate devices, set Dead Peer Detection to On Demand.
- COn HQ-FortiGate, disable Diffie-Helman group 2.
- DOn Remote-FortiGate, set port2 as Interface.
Unlock NSE4_FGT-7.0 to see the answer
You've previewed enough free NSE4_FGT-7.0 questions. Unlock NSE4_FGT-7.0 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.