View all questions & answers for the FCSS - Network Security 7.4 Support Engineer Exam Materials exam


Question 34 Discussion

Refer to the exhibit, which contains partial output from an IKE real-time debug The administrator does not have access to the remote gateway. Based on the debug output, which configuration change the administrator make to the local gateway to resolve the phase 1 negotiation error? (Choose one answer)

  • A. In the phase 1 network configuration, set the IKE version to 2.
  • B. In the phase 1 proposal configuration, add AES128-SHA128 to the list of encryption algorithms.
  • C. In the phase 1 proposal configuration, add AESCBC-SHA2 to the list of encryption algorithms.
  • D. In the phase 1 proposal configuration, add AES256-SHA256 to the list of encryption algorithms.
Correct Answer: D

Brave-Dump Clients Votes

D 100%

Comments



Brave-Dumps Admin 2025-05-13 12:18:44

Selected Answers: D


As pwe debug output, the negotiation failed because the local gateway's Phase 1 proposal did not match the remote gateway's encryption and hash settings. Applying the same logic, the first debug shows that the remote side requires AES256 and SHA256, which are missing on the local side—therefore, adding AES256-SHA256 to the proposal resolves the issue."