Want to pass your Fortinet NSE 7 - Enterprise Firewall 6.4 NSE7_EFW-6.4 exam in the very first attempt? Try Pass2lead! It is equally effective for both starters and IT professionals.
VCE
Examine the output of the `get router info bgp summary' command shown in the exhibit; then answer the question below.

Which statement can explain why the state of the remote BGP peer 10.200.3.1 is Connect?
A. The local peer is receiving the BGP keepalives from the remote peer but it has not received any BGP prefix yet.
B. The TCP session for the BGP connection to 10.200.3.1 is down.
C. The local peer has received the BGP prefixed from the remote peer.
D. The local peer is receiving the BGP keepalives from the remote peer but it has not received the OpenConfirm yet.
Examine the partial output from the IKE real time debug shown in the exhibit; then answer the question
below.
Why didn't the tunnel come up?
A. IKE mode configuration is not enabled in the remote IPsec gateway.
B. The remote gateway's Phase-2 configuration does not match the local gateway's phase- 2 configuration.
C. The remote gateway's Phase-1 configuration does not match the local gateway's phase- 1 configuration.
D. One IPsec gateway is using main mode, while the other IPsec gateway is using aggressive mode.
View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.

Which statements about this debug output are correct? (Choose two.)
A. The remote gateway IP address is 10.0.0.1.
B. It shows a phase 1 negotiation.
C. The negotiation is using AES128 encryption with CBC hash.
D. The initiator has provided remote as its IPsec peer ID.