Fortinet Exam NSE7_SDW-7.2 Topic 1 Question 27 Discussion

Actual exam question for Fortinet's NSE7_SDW-7.2 exam

Question #: 27
Topic #: 1

Which two statements describe how IPsec phase 1 main mode id different from aggressive mode when performing IKE negotiation? (Choose two.)

AA peer ID is included in the first packet from the initiator, along with suggested security policies.

BXAuth is enabled as an additional level of authentication, which requires a username and password.

CThree packets are exchanged between an initiator and a responder instead of six packets.

DThe use of Diffie Hellman keys is limited by the responder and needs initiator acceptance.

Show Suggested Answer

Suggested Answer: A, C

by Marylyn at Jan 13, 2025, 12:35 PM

Limited Time Offer

25%

11 days ago

A and D are correct. Main mode is more secure but takes longer, while aggressive mode is faster but less secure. I still can't believe we need to remember all these IPsec details for the exam!

upvoted 0 times

...