nerdexam
Fortinet

NSE7 · Question #2

Examine the partial output from the IKE realtime debug shown in the exhibit; then answer the question below. Why didn't the tunnel come up?

The correct answer is B. The remote gateway's Phase-2 configuration does not match the local gateway's phase-2. See the full explanation below for the reasoning.

Question

Examine the partial output from the IKE realtime debug shown in the exhibit; then answer the question below. Why didn't the tunnel come up?

Exhibit

NSE7 question #2 exhibit

Options

  • AIKE mode configuration is not enabled in the remote IPsec gateway.
  • BThe remote gateway's Phase-2 configuration does not match the local gateway's phase-2
  • CThe remote gateway's Phase-1 configuration does not match the local gateway's phase-1
  • DOne IPsec gateway is using main mode, while the other IPsec gateway is using aggressive mode.

How the community answered

(28 responses)
  • A
    4% (1)
  • B
    82% (23)
  • C
    11% (3)
  • D
    4% (1)

Community Discussion

No community discussion yet for this question.

Full NSE7 Practice