NSE 6 - Network Security 7.6 Support Engineer Materials - Question #99 Discussion

Refer to the exhibit, which contains a screenshot of some phase 1 settings. The VPN is not up. To diagnose the issue, the administrator enters the following CLI commands on an SSH session on FortiGate: Diagnose vpn ike log-filter dst-addr4 10.0.10.1 Diagnose debug application ike -1 However, the IKE real-time debug does not show any output. Why? (Choose one answer)

• A. The administrator must also run the command diagnose debug enable.
• B. The debug shows only error messages. If there is no output, then the phase 1 and phase 2 configurations match.
• C. The log-filter setting is incorrect. The VPN traffic does not match this filter.
• D. Replace diagnose debug application ike -1 with diagnose debug application ipsec -1.

Brave-Dump Community Votes