Exam NSE7_FSN_AR-7.6 Topic 3 Question 130 Discussion

Actual exam question for Fortinet's NSE7_FSN_AR-7.6 exam
Question #: 130
Topic #: 3
Which exchange lakes care of DoS protection in IKEv2?

Suggested Answer: C Vote an answer

The IKE_SA_INIT exchange in IKEv2 is responsible for DoS protection measures. During IKE_SA_INIT, before authentication and further exchange, the responder can use cookie challenges (per RFC 7296 and Fortinet VPN documentation). If a DoS attack is suspected (many requests from the same source), the responder replies with a cookie. Only after the initiator returns the correct cookie does the exchange proceed, protecting the responder from state exhaustion and certain forms of DoS traffic at the handshake stage.
References:
FortiOS VPN Manual: IKEv2 Exchange Process and DoS Protections
IKEv2 RFC 7296: Description of IKE_SA_INIT and DoS Cookie Mechanism

by KaaserSoft at Oct 15, 2026, 06:05 AM

Limited Time Offer

15%

Off

Get Premium NSE7_FSN_AR-7.6 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
KaaserSoft
2026-10-15 06:06:04
Selected Answer: D
D is: IKE_SA_INIT exchange in IKEv2 is responsible for DoS protection measures
upvoted 1 times
...
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10