Exam NSE7 topic 1 question 66 discussion

Actual exam question from Fortinet's NSE7

Question #: 66
Topic #: 1

View the exhibit, which contains the partial output of an IKE real time debug, and then answer the question below.

The administrator does not have access to the remote gateway. Based on the debug output, what configuration changes can the administrator make to the local gateway to resolve the phase 1 negotiation error?

A. Change phase 1 encryption to AESCBC and authentication to SHA128.
B. Change phase 1 encryption to 3DES and authentication to CBC.
C. Change phase 1 encryption to AES128 and authentication to SHA512.
D. Change phase 1 encryption to 3DES and authentication to SHA256.

Show Suggested Answer

Suggested Answer: D 🗳️

by youtaj at May 25, 2021, 11:25 p.m.

Comments

Submit Cancel

kappa915

2 years, 5 months ago

Selected Answer: D

D is the correct answer. Local gw should be changed to incoming proposal's config.

upvoted 1 times

...

ElDTO91

2 years, 7 months ago

Selected Answer: D

D is the answer

upvoted 2 times

...

jass2323

2 years, 9 months ago

its D, the correct answer

upvoted 2 times

...

FortiSherlock

3 years, 8 months ago

It is funny because neither CBC nor the hash functions are used for authentication. As in the CLI output visible, authentication is done via Preshared Key.

upvoted 1 times

...

Jevza

3 years, 8 months ago

ANS is B

upvoted 2 times

...

youtaj

3 years, 11 months ago

correct answer D

upvoted 3 times

...

Exam NSE7 All Questions

View all questions & answers for the NSE7 exam

Exam NSE7 topic 1 question 66 discussion

Comments

kappa915

ElDTO91

jass2323

FortiSherlock

Jevza

youtaj

SY0-701