nerdexam
Fortinet

NSE7_EFW-6.0 · Question #2

Examine the partial output from the IKE realtime debug shown in the exhibit; then answer the question below. Why didn't the tunnel come up?

The correct answer is C. The remote gateway's Phase-1 configuration does not match the local gateway's phase-1. See the full explanation below for the reasoning.

Question

Examine the partial output from the IKE realtime debug shown in the exhibit; then answer the question below. Why didn't the tunnel come up?

Exhibit

NSE7_EFW-6.0 question #2 exhibit

Options

  • AIKE mode configuration is not enabled in the remote IPsec gateway.
  • BThe remote gateway's Phase-2 configuration does not match the local gateway's phase-2
  • CThe remote gateway's Phase-1 configuration does not match the local gateway's phase-1
  • DOne IPsec gateway is using main mode, while the other IPsec gateway is using aggressive mode.

How the community answered

(18 responses)
  • A
    11% (2)
  • B
    6% (1)
  • C
    78% (14)
  • D
    6% (1)

Community Discussion

No community discussion yet for this question.

Full NSE7_EFW-6.0 Practice