- All Exams Instant Download
Which statement about the exhibit is true?
Refer to the exhibit, which contains the output of a BGP debug command. Which statement about the exhibit is true?A . The local router has received a total of three BGP prefixes from all peers.B . The local router has not established a TCP session with 100.64.3.1.C . Since the...
What can be concluded about the debug output in this scenario?
Refer to the exhibit, which shows the output of a diagnose command. What can be concluded about the debug output in this scenario?A . Servers with a negative TZ value are less preferred for rating requests.B . There is a natural correlation between the value in the Packets field and...
Which statement are true regarding the output in the exhibit?
Examine the output of the 'diagnose debug rating' command shown in the exhibit; then answer the question below. Which statement are true regarding the output in the exhibit? (Choose two.)A . There are three FortiGuard servers that are not responding to the queries sent by the FortiGate.B . The TZ...
In which order is each step and phase displayed in the debug output each time a new dial-up user is connecting to the VPN?
An administrator has configured a dial-up IPsec VPN with one phase 2, extended authentication (XAuth) and IKE mode configuration. The administrator has also enabled the IKE real time debug: diagnose debug application ike-1 diagnose debug enable In which order is each step and phase displayed in the debug output each...
What change must the administrator make to the hub BGP configuration so that the routes learned by one spoke are forwarded to the other spokes?
Exhibits: Refer to the exhibits, which contain the network topology and BGP configuration for a hub. An administrator is trying to configure ADVPN with a hub-spoke VPN setup using iBGP. All the VPNs are up and connected to the hub. The hub is receiving route information from both spokes over...
In which two states is a given session categorized as ephemeral? (Choose two.)
In which two states is a given session categorized as ephemeral? (Choose two.)A . A TCP session waiting for FIN ACKB . A UDP session with packets sent and receivedC . A UDP session with only one packet receivedD . A TCP session waiting for the SYN ACKView AnswerAnswer: C,D
Which of the following statements describes IPS adaptive scanning?
The CLI command set intelligent-mode <enable | disable> controls the IPS engine’s adaptive scanning behavior. Which of the following statements describes IPS adaptive scanning?A . Determines the optimal number of IPS engines required based on system load.B . Downloads signatures on demand from FDS based on scanning requirements.C . Determines...
What is causing the IPsec problem in the phase 1 ?
An administrator added the following Ipsec VPN to a FortiGate configuration: configvpn ipsec phasel -interface edit "RemoteSite" set type dynamic set interface "portl" set mode main set psksecret ENC LCVkCiK2E2PhVUzZe next end config vpn ipsec phase2-interface edit "RemoteSite" set phasel name "RemoteSite" set proposal 3des-sha256 next end However, the phase...
Which of the following statements are true regarding the SIP session helper and the SIP application layer gateway (ALG)? (Choose three.)
Which of the following statements are true regarding the SIP session helper and the SIP application layer gateway (ALG)? (Choose three.)A . SIP session helper runs in the kernel; SIP ALG runs as a user space process.B . SIP ALG supports SIP HA failover; SIP helper does not.C . SIP...
Which TCP session timer must be increased to fix this problem?
An administrator has decreased all the TCP session timers to optimize the FortiGate memory usage. However, after the changes, one network application started to have problems. During the troubleshooting, the administrator noticed that the FortiGate deletes the sessions after the clients send the SYN packets, and before the arrival of...
