- All Exams Instant Download
Based on the debug output, what configuration changes can the administrator make to the local gateway to resolve the phase 1 negotiation error?
View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below. The administrator does not have access to the remote gateway. Based on the debug output, what configuration changes can the administrator make to the local gateway to resolve the phase 1...
Which one of the following statements explains why the cache statistics are all zeros?
View the exhibit, which contains the output of a web diagnose command, and then answer the question below. Which one of the following statements explains why the cache statistics are all zeros?A . The administrator has reallocated the cache memory to a separate process. B. There are no users making...
Which two conditions would prevent a static route from being added to the routing table? (Choose two.)
Which two conditions would prevent a static route from being added to the routing table? (Choose two.)A . There is another other route to the same destination, with a lower distance. B. The route has a lower priority value than another route to the same destination. C. The next-hop IP...
Which of the following statements about the exhibit are true?
View the exhibit, which contains the output of a debug command, and then answer the question below. Which of the following statements about the exhibit are true? (Choose two.)A . In the network on port4, two OSPF routers are down. B. Port4 is connected to the OSPF backbone area. C....
Based on the error displayed by the debug flow, which are valid reasons for this problem?
An administrator cannot connect to the GIU of a FortiGate unit with the IP address 10.0.1.254. The administrator runs the debug flow while attempting the connection using HTTP. The output of the debug flow is shown in the exhibit: Based on the error displayed by the debug flow, which are...
Which statements are correct regarding the output shown?
View the exhibit, which contains the output of diagnose sys session stat, and then answer the question below. Which statements are correct regarding the output shown? (Choose two.)A . There are 0 ephemeral sessions. B. All the sessions in the session table are TCP sessions. C. No sessions have been...
What changes must the administrator make to force this existing session to immediately start using the other interface?
Refer to the exhibits, which show the configuration on FortiGate and partial internet session information from a user on the internal network. An administrator would like to test session failover between the two service provider connections. What changes must the administrator make to force this existing session to immediately start...
If the priority on route ID 2 were changed from 10 to 0, what would happen to traffic matching that user session?
Refer to the exhibits, which show the configuration on FortiGate and partial session information for internet traffic from a user on the internal network. If the priority on route ID 2 were changed from 10 to 0, what would happen to traffic matching that user session?A . The session would...
Which two tasks are automated using the Import Configuration wizard on FortiManager? (Choose two.)
Which two tasks are automated using the Import Configuration wizard on FortiManager? (Choose two.)A . Importing firewall address objects from managed devices B. Importing interface mappings from managed devices C. Importing static and dynamic route configurations from managed devices D. Importing devices to FortiManagerView AnswerAnswer: A,B Explanation: https://docs.fortinet.com/document/fortimanager/7.0.5/administration-guide/337348
What is causing the IPsec problem in the phase 1 ?
An administrator added the following Ipsec VPN to a FortiGate configuration: configvpn ipsec phasel -interface edit "RemoteSite" set type dynamic set interface "portl" set mode main set psksecret ENC LCVkCiK2E2PhVUzZe next end config vpn ipsec phase2-interface edit "RemoteSite" set phasel name "RemoteSite" set proposal 3des-sha256 next end However, the phase...
