NSE7

NSE7 practice questions, page 4 of 4, with answer review and explanations.

Question 16

An administrator has configured a dial-up IPsec VPN with one phase 2, extended authentication (XAuth) and IKE mode configuration. The administrator has also enabled the IKE real time debug: diagnose debug application ike-1 diagnose debug enable In which order is each step and phase displayed in the debug output each time a new dial-up user is connecting to the VPN?

  1. Phase1; IKE mode configuration; XAuth; phase 2.
  2. Phase1; XAuth; IKE mode configuration; phase2.
  3. Phase1; XAuth; phase 2; IKE mode configuration.
  4. Phase1; IKE mode configuration; phase 2; XAuth.

Question 17

Two independent FortiGate HA clusters are connected to the same broadcast domain. The administrator has reported that both clusters are using the same HA virtual MAC address. This creates a duplicated MAC address problem in the network. What HA setting must be changed in one of the HA clusters to fix the problem?

  1. Group ID.
  2. Group name.
  3. Session pickup.
  4. Gratuitous ARPs.