Fortinet
NSE4_FGT-7.0 · Question #70
NSE4_FGT-7.0 Question #70: Real Exam Question with Answer & Explanation
The correct answer is D: On HQ-FortiGate, set Encryption to AES256.. See the full explanation below for the reasoning.
Question
Refer to the exhibit. A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up. but phase 2 fails to come up. Based on the phase 2 configuration shown in the exhibit, what configuration change will bring phase 2 up?
Exhibit
Options
- AOn HQ-FortiGate,enable Auto-negotiate.
- BOn Remote-FortiGate, set Seconds to 43200.
- COn HQ-FortiGate,enable Diffie-Hellman Group 2.
- DOn HQ-FortiGate, set Encryption to AES256.
Community Discussion
No community discussion yet for this question.