exam questions

Exam NSE7_EFW-7.2 All Questions

View all questions & answers for the NSE7_EFW-7.2 exam

Exam NSE7_EFW-7.2 topic 1 question 54 discussion

Actual exam question from Fortinet's NSE7_EFW-7.2
Question #: 54
Topic #: 1
[All NSE7_EFW-7.2 Questions]

Which two statements about IKE version 2 are true? (Choose two.)

  • A. It supports the XAuth protocol.
  • B. Phase 1 includes main mode.
  • C. It exchanges a minimum of four messages to establish a secure tunnel.
  • D. It supports the extensible authentication protocol (EAP).
Show Suggested Answer Hide Answer
Suggested Answer: CD 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
charruco
11 months ago
Selected Answer: CD
CD are correct Study Guide 7.2 Page 294-295
upvoted 1 times
...
dsticht
11 months, 2 weeks ago
Selected Answer: CD
p294 & 295 of Study Guide
upvoted 3 times
...
K4KarOt0
11 months, 3 weeks ago
Selected Answer: CD
CD is correct. IKEv2 uses a simplified and more efficient exchange process compared to IKEv1. It typically requires only four messages to establish a secure tunnel in its main exchange: IKE_SA_INIT: The first exchange initializes the IKE Security Association (SA) and performs a Diffie-Hellman exchange to generate shared secret keys. IKE_AUTH: The second exchange authenticates the parties and establishes the IPsec SA. IKEv2 supports EAP, which provides a flexible framework for various authentication methods. EAP can be used for user authentication, allowing integration with systems such as RADIUS or other authentication servers, providing a high degree of flexibility in choosing authentication mechanisms.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago