nerdexam
Fortinet

NSE7_EFW-6.2 · Question #3

Examine the partial output from the IKE realtime debug shown in the exhibit; then answer the question below. Why didn't the tunnel come up?

The correct answer is C. The remote gateway's Phase-1 configuration does not match the local gateway's phase-1. See the full explanation below for the reasoning.

Question

Examine the partial output from the IKE realtime debug shown in the exhibit; then answer the question below. Why didn't the tunnel come up?

Exhibit

NSE7_EFW-6.2 question #3 exhibit

Options

  • AIKE mode configuration is not enabled in the remote IPsec gateway.
  • BThe remote gateway's Phase-2 configuration does not match the local gateway's phase-2
  • CThe remote gateway's Phase-1 configuration does not match the local gateway's phase-1
  • DOne IPsec gateway is using main mode, while the other IPsec gateway is using aggressive mode.

How the community answered

(51 responses)
  • A
    8% (4)
  • B
    4% (2)
  • C
    76% (39)
  • D
    12% (6)

Community Discussion

No community discussion yet for this question.

Full NSE7_EFW-6.2 Practice