FCSS-EFW-AD-7-6: Fortinet NSE 7 - Enterprise Firewall 7.6 AdministratorDemo

By Fortinet · Question Mode

QuestionQ22

VPN

When implementing IKEv2 in a VPN topology, which two statements are correct?

Choose two
  • A Unlike IKEv1, it supports mode config.
  • B It includes stronger Diffie-Hellman (DH) groups, such as Elliptic Curve (ECP) groups.
  • C It supports the extensible authentication protocol (EAP).
  • D It exchanges a minimum of two messages to establish a secure tunnel.
Explanation

IKEv2 supports EAP authentication through its EAP payload and can negotiate elliptic-curve Diffie-Hellman groups, including ECP groups. IKEv1 already supports Mode Configuration, and IKEv2 tunnel establishment requires both IKE_SA_INIT and IKE_AUTH request/response exchanges rather than only two messages.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!