Examine the partial output from the IKE real time debug shown in the exhibit; then answer the question below.
Why didn’t the tunnel come up?
A.
IKE mode configuration is not enabled in the remote IPsec gateway.
B.
The remote gateway’s Phase-2 configuration does not match the local gateway’s phase-2 configuration.
C.
The remote gateway’s Phase-1 configuration does not match the local gateway’s phase-1 configuration.
D.
One IPsec gateway is using main mode, while the other IPsec gateway is using aggressive mode.
It’s debug application ike so it should be answer C.
1
0
debug application ike also shows phase 2 issues, but the error message corresponds to isakmp, that’s why the answer should be C
2
0
Congratulations!!! Passed the NSE7 exam recently!
Got 30 questions in total and scored 85% (the passing line is 70% now)!
There were only few new Qs in my actual NSE7 test, please pay close attention to topics on isolating, diagnosing, and fixing the most common issues in networks with FortiGate devices.
And, questions on OSPF Routing were a little difficult, knowing it deeply!
Questions on this site are not enough for passing, I recommend you to read NEW NSE7 dumps here shared by PassLeader:
http://www.fortinetdumps.com/?s=nse7
(Both NSE7 VCE and PDF dumps on passleader.com are available now)
Good Luck!!!
0
0