These are original questions written by RouteLearn to check your understanding of the domain, not questions from the exam. They use the course lab (FGT1, its LAN on port2, DMZ on port3 and Internet on port1) and FortiOS 7.6 behaviour.
Question 1 of 90 answered
FGT1 and FGT2 build the to-BR1 tunnel with IKEv2 and a pre-shared key. Which exchange carries each side's proof of the key and also creates the first IPsec SA for user traffic?