Fortinet Exam NSE7_EFW-6.4 Topic 1 Question 35 Discussion

Actual exam question for Fortinet's NSE7_EFW-6.4 exam

Question #: 35
Topic #: 1

View the exhibit, which contains a screenshot of some phase-1 settings, and then answer the question below.

The VPN is up, and DPD packets are being exchanged between both IPsec gateways; however, traffic cannot pass through the tunnel. To diagnose, the administrator enters these CLI commands:

However, the IKE real time debug does not show any output. Why?

AThe debug output shows phases 1 and 2 negotiations only. Once the tunnel is up, it does not show any more output.

BThe log-filter setting was set incorrectly. The VPN's traffic does not match this filter.

CThe debug shows only error messages. If there is no output, then the tunnel is operating normally.

DThe debug output shows phase 1 negotiation only. After that, the administrator must enable the following real time debug: diagnose debug application ipsec -1.

Show Suggested Answer

Suggested Answer: B

by Markus at May 08, 2022, 08:38 AM

Limited Time Offer

25%

Off

Get Premium NSE7_EFW-6.4 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!