View all questions & answers for the NSE 4 - FortiOS 7.6 Administrator Exam Materials exam

NSE 4 - FortiOS 7.6 Administrator Exam Materials - Question #101 Discussion

Comment Image Comment Image Comment Image
Question Diagram

Refer to the exhibit. A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 failed to come up. The administrator has also re-entered the pre-shared key on both FortiGate devices to make sure they match. Based on the phase 1 configuration and the diagram shown in the exhibit, which two configuration changes can the administrator make to bring phase 1 up? (Choose two answers)

  • A. On HQ-NGFW, set IKE mode to Main (ID protection).
  • B. On both FortiGate devices, set Dead Peer Detection to On Demand.
  • C. On BR1-FGT, set port2 to Interface.
  • D. On HQ-NGFW, disable Diffie-Hellman group 2.
Correct Answer: A,C

Brave-Dump Community Votes

Answer: A, C (4 votes) 80%
Answer: C, D (1 vote) 20%

Community Explanations & Comments (5)

Brave-Dumps.com Admin 6 months ago
Selected: A, C
A,C
Ahmed 4 months ago
Selected: C, D
port is two as showing in the diagram and DH is mismatch
Sidney 3 months ago
Selected: A, C
A,C
Refaat Mohesin 2 months ago
Selected: A, C
A,C
Fadil Bushra 1 month ago
Selected: A, C
While the Diffie-Hellman groups do not match perfectly, Group 5 is selected on both firewalls, which allows them to automatically negotiate and agree upon a common DH group during the Phase 1 exchange.