ExamGecko
Question list
Search
Search

Question 99 - NSE4_FGT-7.2 discussion

Report
Export

What is the effect of enabling auto-negotiate on the phase 2 configuration of an IPsec tunnel?

A.
FortiGate automatically negotiates different local and remote addresses with the remote peer.
Answers
A.
FortiGate automatically negotiates different local and remote addresses with the remote peer.
B.
FortiGate automatically negotiates a new security association after the existing security association expires.
Answers
B.
FortiGate automatically negotiates a new security association after the existing security association expires.
C.
FortiGate automatically negotiates different encryption and authentication algorithms with the remote peer.
Answers
C.
FortiGate automatically negotiates different encryption and authentication algorithms with the remote peer.
D.
FortiGate automatically brings up the IPsec tunnel and keeps it up, regardless of activity on the IPsec tunnel.
Answers
D.
FortiGate automatically brings up the IPsec tunnel and keeps it up, regardless of activity on the IPsec tunnel.
Suggested answer: D

Explanation:

https://kb.fortinet.com/kb/documentLink.do?externalID=12069

FortiGate Infrastructure 7.2 Study Guide (p.264): '...then FortiGate might drop interesting traffic because of the absence of active SAs. To prevent this, you can enable Auto-negotiate. When you do this, FortiGate not only negotiates new SAs before the current SAs expire, but it also starts using the new SAs right away.' 'Another benefit of enabling Auto-negotiate is that the tunnel comes up and stays up automatically, even when there is no interesting traffic. When you enable Autokey Keep Alive and keep Auto-negotiate disabled, the tunnel does not come up automatically unless there is interesting traffic. However, after the tunnel is up, it stays that way because FortiGate periodically sends keep alive packets over the tunnel. Note that when you enable Auto-negotiate, Autokey Keep Alive is implicitly enabled.'

asked 18/09/2024
Filippo Bertuzzi
26 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first