Exam NSE7_NST-7.2 topic 1 question 55 discussion

Actual exam question from Fortinet's NSE7_NST-7.2

Question #: 55
Topic #: 1

Refer to the exhibit, which contains a screenshot of some phase 1 settings.

The VPN is not up. To diagnose the issue, the administrator enters the following CLI commands on an SSH session on FortiGate:

Diagnose vpn ike log-filter dst-addr4 10.0.10.1
Diagnose debug application ike -1

However, the IKE real-time debug does not show any output. Why?

A. The administrator must also run the command diagnose debug enable.
B. The debug shows only error messages. If there is no output, then the phase 1 and phase 2 configurations match.
C. The log-filter setting is incorrect. The VPN traffic does not match this filter.
D. Replace diagnose debug application ike -1 with diagnose debug application ipsec -1.

Show Suggested Answer

Suggested Answer: A 🗳️

by Ic3Box at March 18, 2025, 10:09 a.m.