nerdexam
Fortinet

NSE7_EFW · Question #2

NSE7_EFW Question #2: Real Exam Question with Answer & Explanation

The correct answer is B. The remote gateway's Phase-2 configuration does not match the local gateway's phase-2. See the full explanation below for the reasoning.

Question

Examine the partial output from the IKE realtime debug shown in the exhibit; then answer the question below. Why didn't the tunnel come up?

Exhibit

NSE7_EFW question #2 exhibit

Options

  • AIKE mode configuration is not enabled in the remote IPsec gateway.
  • BThe remote gateway's Phase-2 configuration does not match the local gateway's phase-2
  • CThe remote gateway's Phase-1 configuration does not match the local gateway's phase-1
  • DOne IPsec gateway is using main mode, while the other IPsec gateway is using aggressive mode.

Community Discussion

No community discussion yet for this question.

Full NSE7_EFW Practice
Examine the partial output from the IKE realtime debug shown in... | NSE7_EFW Q#2 Answer | NerdExam