StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · IPsec VPNs

Practice question 393 of 440 · medium

Peers reach each other over UDP 500 but offer no compatible Phase 1 encryption/integrity or DH parameters. What is the most appropriate next action?

Choose the single best answer.

  1. A.Compare and align mutually supported Phase 1 proposals and DH settings.
  2. B.Increase encryption strength on only one side regardless of peer support.
  3. C.Create a LAN allow policy and assume endpoint negotiation is repaired.
  4. D.Change the route description to the peer’s hostname.
Show the answer and explanation

✓ Correct answer

  • Compare and align mutually supported Phase 1 proposals and DH settings.

Transport reachability is not cryptographic agreement. The peers need compatible offers. A unilateral stronger but incompatible proposal, forwarding permission or route description does not solve that negotiation failure.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.