FCP – FortiManager Administrator 7.6 — Question 3

The administrator uses FortiManager to push a CLI script using the Remote FortiGate Directly (via CLI) option to configure an IPsec VPN. However, when running the script, the administrator receives the following error: config vpn ipsec phase2-interface [parameter(s) invalid. detail: object mismatch]
What must the administrator do to resolve the script error and successfully apply the IPsec configuration?

Answer options

• A. Add the end command after finishing the IPsec phase 1-interface configuration block.
• B. Use IPsec templates to deploy provisioning templates.
• C. Add a second config vpn ipsec phase2-interface block without linking it to phase1.
• D. Run the script using the policy package or ADOM database method.

Correct answer: A

Explanation

The correct answer is A because adding the end command indicates the completion of the phase 1-interface configuration, which resolves the object mismatch error when defining the phase 2-interface. Options B and C do not address the specific issue of the script error, and option D suggests an alternative method that may not resolve the underlying cause of the error.