Question 1

In IKEv2, which exchange establishes the first CHILD_SA?

Options :

A : IKE_SA_INIT

B : INFORMATIONAL

C : CREATE_CHILD_SA

D : IKE_AUTH

Answer: D

Question 2

Which three conditions are required for two FortiGate devices to form an OSPF adjacency? (Choose three answers)

Options :

A : OSPF link costs match.

B : OSPF interface priority settings are unique.

C : OSPF interface network types match.

D : Authentication settings match.

E : OSPF router IDs are unique.

Answer: C,D,E

Question 3

Which two statements about Security Fabric communications are true? (Choose two.)

Options :

A : By default, the downstream FortiGate establishes a connection with the upstream FortiGate using TCP port 8013.

B : FortiTelemetry must be manually enabled on the FortiGate interface.

C : The default ports for FortiTelemetry and Neighbor Discovery can be modified.

D : Security Fabric communication is enabled by default among all Fortinet devices.

Answer: A,B

Question 4

Refer to the exhibit, which contains the output of diagnose vpn tunnel list.Which command will capture ESP traffic for the VPN named DialUp_0?

Options :

A : diagnose sniffer packet any ' ip proto 50 '

B : diagnose sniffer packet any ' host 10.0.10.10 '

C : diagnose sniffer packet any ' esp and host 10.200.3.2 '

D : diagnose sniffer packet any ' port 4500 '

Answer: D

Question 5

Refer to the exhibit.An IPsec VPN tunnel using IKEv2 was brought up successfully, but when the tunnel rekey takes place the tunnel goes down.The debug command for IKE was enabled and, in the exhibit, you can review the partial output of the debugIKE while attempting to bring the tunnel up.What is causing. The tunnel to be down?

Options :

A : A Diffie-Hellman mismatch

B : Blocked traffic on UDP port 500

C : A mismatch m the Phase 1 negotiations

D : A mismatch in the Phase 2 negotiations

Answer: A

Free NSE7_FSN_AR-7.6 Mock Exam – Practice Online Confidently

Buying Options: