- All Exams Instant Download
Based on the above outputs, which is the FortiGuard web filter category for the web site www.fgt99.com?
Examine the partial output from two web filter debug commands; then answer the question below: Based on the above outputs, which is the FortiGuard web filter category for the web site www.fgt99.com?A . Finance and bankingB . General organization.C . Business.D . Information technology.View AnswerAnswer: C
Which of the following statements are true regarding the SIP session helper and the SIP application layer gateway (ALG)? (Choose three.)
Which of the following statements are true regarding the SIP session helper and the SIP application layer gateway (ALG)? (Choose three.)A . SIP session helper runs in the kernel; SIP ALG runs as a user space process.B . SIP ALG supports SIP HA failover; SIP helper does not.C . SIP...
An administrator has decreased all the TCP session timers to optimize the FortiGate memory usage. However, after the changes, one network application started to have problems. During the troubleshooting, the administrator noticed that the FortiGate deletes the sessions after the clients send the SYN packets, and before the arrival of the SYN/ACKs. When the SYN/ACK packets arrive to the FortiGate, the unit has already deleted the respective sessions. Which TCP session timer must be increased to fix this problem?
An administrator has decreased all the TCP session timers to optimize the FortiGate memory usage. However, after the changes, one network application started to have problems. During the troubleshooting, the administrator noticed that the FortiGate deletes the sessions after the clients send the SYN packets, and before the arrival of...
Which statements are true regarding the output in the exhibit?
Examine the output of the ‘get router info bgp summary’ command shown in the exhibit; then answer the question below. Which statements are true regarding the output in the exhibit? (Choose two.)A . BGP state of the peer 10.125.0.60 is Established.B . BGP peer 10.200.3.1 has never been down since...
Which real time debug should an administrator enable to troubleshoot RADIUS authentication problems?
Which real time debug should an administrator enable to troubleshoot RADIUS authentication problems?A . Diagnose debug application radius -1.B . Diagnose debug application fnbamd -1.C . Diagnose authd console Clog enable.D . Diagnose radius console Clog enable.View AnswerAnswer: A
Based on the output, what FortiGate LDAP setting is configured incorrectly?
A FortiGate device has the following LDAP configuration: The administrator executed the ‘dsquery’ command in the Windows LDAp server 10.0.1.10, and got the following output: >dsquery user Csamid administrator “CN=Administrator, CN=Users, DC=trainingAD, DC=training, DC=lab” Based on the output, what FortiGate LDAP setting is configured incorrectly?A . cnid.B . username.C ....
What should the administrator check to fix the problem?
A FortiGate is configured as an explicit web proxy. Clients using this web proxy are reposting DNS errors when accessing any website. The administrator executes the following debug commands and observes that the n-dns-timeout counter is increasing: What should the administrator check to fix the problem?A . The connectivity between...
The VPN is currently up, there is no traffic crossing the tunnel and DPD packets are being interchanged between both IPsec gateways. However, the IKE real time debug does NOT show any output. Why isn’t there any output?
Examine the IPsec configuration shown in the exhibit; then answer the question below. An administrator wants to monitor the VPN by enabling the IKE real time debug using these commands: diagnose vpn ike log-filter src-addr4 10.0.10.1 diagnose debug application ike -1 diagnose debug enable The VPN is currently up, there...
Which of the following statements is true regarding a FortiGate configured as an explicit web proxy?
Which of the following statements is true regarding a FortiGate configured as an explicit web proxy?A . FortiGate limits the number of simultaneous sessions per explicit web proxy user. This limit CANNOT be modified by the administrator.B . FortiGate limits the total number of simultaneous explicit web proxy users.C ....
What is the meaning of the packets dropped counter at the end of the sniffer?
Examine the following partial output from a sniffer command; then answer the question below. What is the meaning of the packets dropped counter at the end of the sniffer?A . Number of packets that didn’t match the sniffer filter.B . Number of total packets dropped by the FortiGate.C . Number...
