Exam FCP_FGT_AD-7.6 topic 1 question 35 discussion

Actual exam question from Fortinet's FCP_FGT_AD-7.6

Question #: 35
Topic #: 1

Refer to the exhibit.

A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come up.
Based on the phase 2 configuration shown in the exhibit, which two configuration changes will bring phase 2 up? (Choose two.)

A. On BR1-FGT, set Seconds to 43200.
B. On HQ-NGFW, enable Diffie-Hellman Group 2.
C. On BR1-FGT, set Remote Address to
10.0.11.0/255.255.255.0
D. On HQ-NGFW. set Encryption to AES256

Show Suggested Answer

Suggested Answer: AC 🗳️

by 19e1af9 at July 24, 2025, 1:57 p.m.

Comments

Submit Cancel

mirko1976

7 hours, 16 minutes ago

Selected Answer: CD

@ 833685d check the IP address The remote subnet selectors don’t match. Set BR1-FGT’s Remote Address to 10.0.11.0/255.255.255.0 (C). The phase-2 proposal algorithms don’t match. Change HQ-NGFW Encryption from AES128 to AES256 to match BR1-FGT (D).

upvoted 1 times

...