nerdexam
Fortinet

NSE7_EFW · Question #2

Examine the partial output from the IKE realtime debug shown in the exhibit; then answer the question below. Why didn't the tunnel come up?

The correct answer is B. The remote gateway's Phase-2 configuration does not match the local gateway's phase-2. See the full explanation below for the reasoning.

Question

Examine the partial output from the IKE realtime debug shown in the exhibit; then answer the question below. Why didn't the tunnel come up?

Exhibit

NSE7_EFW question #2 exhibit

Options

  • AIKE mode configuration is not enabled in the remote IPsec gateway.
  • BThe remote gateway's Phase-2 configuration does not match the local gateway's phase-2
  • CThe remote gateway's Phase-1 configuration does not match the local gateway's phase-1
  • DOne IPsec gateway is using main mode, while the other IPsec gateway is using aggressive mode.

How the community answered

(30 responses)
  • A
    3% (1)
  • B
    80% (24)
  • C
    13% (4)
  • D
    3% (1)

Community Discussion

No community discussion yet for this question.

Full NSE7_EFW Practice