Exam NSE7 topic 1 question 70 discussion

Actual exam question from Fortinet's NSE7

Question #: 70
Topic #: 1

View the exhibit, which contains a screenshot of some phase-1 settings, and then answer the question below.

The VPN is up, and DPD packets are being exchanged between both IPsec gateways; however, traffic cannot pass through the tunnel. To diagnose, the administrator enters these CLI commands:

However, the IKE real time debug does not show any output. Why?

A. The debug output shows phases 1 and 2 negotiations only. Once the tunnel is up, it does not show any more output.
B. The log-filter setting was set incorrectly. The VPN's traffic does not match this filter.
C. The debug shows only error messages. If there is no output, then the tunnel is operating normally.
D. The debug output shows phase 1 negotiation only. After that, the administrator must enable the following real time debug: diagnose debug application ipsec -1.

Show Suggested Answer

Suggested Answer: D 🗳️

by youtaj at May 25, 2021, 11:36 p.m.

Comments

Submit Cancel

frog656

2 years, 5 months ago

Selected Answer: B

B is correct

upvoted 1 times

...

4uba

2 years, 10 months ago

Seems like B is correct.

upvoted 1 times

...

youtaj

3 years, 11 months ago

i guess B

upvoted 2 times

...

Exam NSE7 All Questions

View all questions & answers for the NSE7 exam

Exam NSE7 topic 1 question 70 discussion

Comments

frog656

4uba

youtaj

SY0-701