- All Exams Instant Download
Based on the debug output, which phase 1 setting is enabled in the configuration of this VPN?
Refer to the exhibit, which contains partial output from an IKE real-time debug. Based on the debug output, which phase 1 setting is enabled in the configuration of this VPN?A . auto-discovery-shortcutB . auto-discovery-forwarderC . auto-discovery-senderD . auto-discovery-receiverView AnswerAnswer: C Explanation: Reference: https://docs.fortinet.com/document/fortigate/6.0.0/handbook/320160/example-advpn-configuration
Why the default route using port2 is not displayed in the output of the second command?
Examine the following partial outputs from two routing debug commands; then answer the question below: Why the default route using port2 is not displayed in the output of the second command?A . It has a lower priority than the default route using port1.B . It has a higher priority than...
Based on the above output, what FortiGate LDAP settings must the administer check?
A FortiGate device has the following LDAP configuration: The LDAP user student cannot authenticate. The exhibit shows the output of the authentication real time debug while testing the student account: Based on the above output, what FortiGate LDAP settings must the administer check? (Choose two.)A . cnid.B . username.C ....
Which statements about this debug output are correct?
View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below. Which statements about this debug output are correct? (Choose two.)A . The remote gateway IP address is 10.0.0.1.B . It shows a phase 1 negotiation.C . The negotiation is using AES128...
If the administrator knows that there is no NAT device located between both FortiGates, what command should the administrator execute?
An administrator wants to capture ESP traffic between two FortiGates using the built-in sniffer. If the administrator knows that there is no NAT device located between both FortiGates, what command should the administrator execute?A . diagnose sniffer packet any ‘udp port 500’B . diagnose sniffer packet any ‘udp port 4500’C...
Which one of the following statements about this FortiGate is correct?
View the exhibit, which contains the output of a debug command, and then answer the question below. Which one of the following statements about this FortiGate is correct?A . It is currently in system conserve mode because of high CPU usage.B . It is currently in extreme conserve mode because...
Which IP addresses are included in the output of this command?
Examine the output of the ‘diagnose ips anomaly list’ command shown in the exhibit; then answer the question below. Which IP addresses are included in the output of this command?A . Those whose traffic matches a DoS policy.B . Those whose traffic matches an IPS sensor.C . Those whose traffic...
Which statements are true regarding the Weight value?
View the exhibit, which contains the output of a diagnose command, and the answer the question below. Which statements are true regarding the Weight value?A . Its initial value is calculated based on the round trip delay (RTT).B . Its initial value is statically set to 10.C . Its value...
Which statements are true regarding the two entries in the FortiGate session table related with this traffic?
A FortiGate's portl is connected to a private network. Its port2 is connected to the Internet. Explicit web proxy is enabled in port1 and only explicit web proxy users can access the Internet. Web cache is NOT enabled. An internal web proxy user is downloading a file from the Internet...
Which one of the following statements explains why the cache statistics are all zeros?
View the exhibit, which contains the output of a web diagnose command, and then answer the question below. Which one of the following statements explains why the cache statistics are all zeros?A . The administrator has reallocated the cache memory to a separate process.B . There are no users making...
