View all questions & answers for the NSE 6 - Network Security 7.6 Support Engineer Materials exam


NSE 6 - Network Security 7.6 Support Engineer Materials-Question 9 Discussion

Refer to the exhibit. An IPsec VPN tunnel using IKEv2 was brought up successfully, but when the tunnel rekey takes place the tunnel goes down. The debug command for IKE was enabled and, in the exhibit, you can review the partial output of the debug IKE while attempting to bring the tunnel up. What is causing the tunnel to be down? (Choose one answer)

  • A. A mismatch in the Phase 2 negotiations
  • B. Blocked traffic on UDP port 500
  • C. A Diffie-Hellman mismatch
  • D. A mismatch in the Phase 1 negotiations
Correct Answer: C

Brave-Dump Clients Votes

C 66.67%
A 33.33%

Comments



Brave-Dumps.com Admin 2025-10-23 18:42:32

Selected Answers: A


We need another check from our expert clients. Anyone available to review it?

Mohammed Khaled 2025-11-25 13:07:18

Selected Answers: C


since it is phase 1 yet the answer is not correct, I believe C will be accurate as DH is not matching and the message showing no proposal chosen.

Pedro Joao Serafim Junior 2025-12-06 10:13:19

Selected Answers: A


This a mismatch phase2 negotiation, the DHGroup is wrong.

Adam 2026-01-03 12:21:10

Selected Answers: C


Logs clearly show IPsec phase 2 PFS DH group mismatch (MOD2048/MOD1536 vs MOD3072) while there's match in encryption algorithm 3DES and hashing algorithm SHA256, any idea why C is wrong?

Brave-Dumps.com Admin 2026-01-03 13:56:44

Selected Answers: C


C is the correct one

Anonymous User 2026-04-05 17:28:28

Selected Answers: C


In Phase1 SA all 3 valuses are sent i.e. Encryption (3DES, AES etc), Integration/Hashing (SHA, SHA256 etc) and DH Group. In Pahes SA only has Encryption (3DES, AES etc), Integration/Hashing (SHA, SHA256 etc) and DH group is sent seprately when PFS is enabled and in debug you will clearly see PFS

diagnose debug application ike -1 is for Phse1 debug

Network_Security_Support_Engineer_7.6_Study_Guide Page 323