Exam NSE4_FGT-7.0 topic 1 question 27 discussion

Actual exam question from Fortinet's NSE4_FGT-7.0

Question #: 27
Topic #: 1

Refer to the exhibit.

A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase
2 fails to come up.
Based on the phase 2 configuration shown in the exhibit, what configuration change will bring phase 2 up?

A. On HQ-FortiGate, enable Auto-negotiate.
B. On HQ-FortiGate, enable Diffie-Hellman Group 2.
C. On HQ-FortiGate, set Encryption to AES256.
D. On Remote-FortiGate, set Seconds to 43200.

Show Suggested Answer

Suggested Answer: C 🗳️

by MartiFC at Dec. 10, 2022, 8:55 a.m.

Comments

Submit Cancel

AMK2ENG

12 months ago

C. On HQ-FortiGate, set Encryption to AES256.

upvoted 1 times

...

raydel92

1 year, 3 months ago

Selected Answer: C

C. On HQ-FortiGate, set Encryption to AES256. FortiGate Infrastructure 7.2 Study Guide (p.263): "A phase 2 proposal defines the algorithms supported by the peer for encrypting and decrypting the data over the tunnel. You can configure multiple proposals to offer more options to the remote peer when negotiating the IPsec SAs. Like in phase 1, you need to select a combination of encryption and authentication algorithms." Reference and download study guide: https://ebin.pub/fortinet-fortigate-infrastructure-study-guide-for-fortios-72.html

upvoted 1 times

...