A configuration excerpt has set ike-version 2. An engineer proposes switching its Main Mode to Aggressive Mode to fix negotiation. Which interpretation is correct?

Choose the single best answer.

A.Main Mode changes the subnet mask of Phase 2.
B.Aggressive Mode enables ESP TCP port 50.
C.IKEv2 has no Main/Aggressive mode choice; diagnose its actual parameters instead.
D.IKEv2 requires Aggressive Mode for every static peer.

Show the answer and explanation

✓ Correct answer

IKEv2 has no Main/Aggressive mode choice; diagnose its actual parameters instead.

Main and Aggressive Mode are IKEv1 terminology. They are not settings to repair an IKEv2 relationship. Neither subnet masks nor an invented ESP TCP port follow from those modes.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.