View all questions & answers for the FCSS - Network Security 7.4 Support Engineer Exam Materials exam

FCSS - Network Security 7.4 Support Engineer Exam Materials - Question #34 Discussion

Comment Image Comment Image Comment Image
Question Diagram

Refer to the exhibit, which contains partial output from an IKE real-time debug The administrator does not have access to the remote gateway. Based on the debug output, which configuration change the administrator make to the local gateway to resolve the phase 1 negotiation error? (Choose one answer)

  • A. In the phase 1 network configuration, set the IKE version to 2.
  • B. In the phase 1 proposal configuration, add AES128-SHA128 to the list of encryption algorithms.
  • C. In the phase 1 proposal configuration, add AESCBC-SHA2 to the list of encryption algorithms.
  • D. In the phase 1 proposal configuration, add AES256-SHA256 to the list of encryption algorithms.
Correct Answer: D

Brave-Dump Community Votes

Answer: D (1 vote) 100%

Community Explanations & Comments (1)

Brave-Dumps.com Admin 1 year ago
Selected: D
As pwe debug output, the negotiation failed because the local gateway's Phase 1 proposal did not match the remote gateway's encryption and hash settings. Applying the same logic, the first debug shows that the remote side requires AES256 and SHA256, which are missing on the local side—therefore, adding AES256-SHA256 to the proposal resolves the issue."