View all questions & answers for the NSE 6 - Network Security 7.6 Support Engineer Materials exam


Question 9 Discussion

Refer to the exhibit. An IPsec VPN tunnel using IKEv2 was brought up successfully, but when the tunnel rekey takes place the tunnel goes down. The debug command for IKE was enabled and, in the exhibit, you can review the partial output of the debug IKE while attempting to bring the tunnel up. What is causing the tunnel to be down? (Choose one answer)

  • A. A mismatch in the Phase 2 negotiations
  • B. Blocked traffic on UDP port 500
  • C. A Diffie-Hellman mismatch
  • D. A mismatch in the Phase 1 negotiations
Correct Answer: C

Brave-Dump Clients Votes

C 60%
A 40%

Comments



Brave-Dumps Admin 2025-10-23 18:42:32

Selected Answers: A


We need another check from our expert clients. Anyone available to review it?

Mohammed Khaled 2025-11-25 13:07:18

Selected Answers: C


since it is phase 1 yet the answer is not correct, I believe C will be accurate as DH is not matching and the message showing no proposal chosen.

Pedro Joao Serafim Junior 2025-12-06 10:13:19

Selected Answers: A


This a mismatch phase2 negotiation, the DHGroup is wrong.

Adam 2026-01-03 12:21:10

Selected Answers: C


Logs clearly show IPsec phase 2 PFS DH group mismatch (MOD2048/MOD1536 vs MOD3072) while there's match in encryption algorithm 3DES and hashing algorithm SHA256, any idea why C is wrong?

Brave-Dumps Admin 2026-01-03 13:56:44

Selected Answers: C


C is the correct one