- All Exams Instant Download
Why?
View the exhibit, which contains a screenshot of some phase-1 settings, and then answer the question below. The VPN is up, and DPD packets are being exchanged between both IPsec gateways; however, traffic cannot pass through the tunnel. To diagnose, the administrator enters these CLI commands: However, the IKE real...
Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243 is experiencing an outage?
View the central management configuration shown in the exhibit, and then answer the question below. Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243 is experiencing an outage?A . 10.0.1.240B . One of the public FortiGuard distribution serversC . 10.0.1.244D . 10.0.1.242View AnswerAnswer: B
Which two statements about this debug output are correct?
Refer to the exhibit, which contains partial output from an IKE real-time debug. Which two statements about this debug output are correct? (Choose two.)A . The initiator provided remote as its IPsec peer ID.B . It shows a phase 2 negotiation.C . Perfect Forward Secrecy (PFS) is enabled in the...
Which of the following statements is true regarding this output?
View the exhibit, which contains the output of a real-time debug, Which statement about this output is true? Which of the following statements is true regarding this output?A . The requested URL belongs to category ID 255.B . The server hostname Is training, fortinet.com.C . FortiGate found the requested URL...
Which statements are correct regarding the output?
View the exhibit, which contains the output of get sys ha status, and then answer the question below. Which statements are correct regarding the output? (Choose two.)A . The slave configuration is not synchronized with the master.B . The HA management IP is 169.254.0.2.C . Master is selected because it...
Why?
Refer to the exhibit, which contains a screenshot of some phase 1 settings. The VPN is not up. To diagnose the issue, the administrator enters the following CLI commands to an SSH session on FortiGate: diagnose vpn ike log-filter dst-addr4 10.0.10.1 diagnose debug application ike -1 However, the IKE real-time...
Which two conditions would prevent a static route from being added to the routing table? (Choose two.)
Which two conditions would prevent a static route from being added to the routing table? (Choose two.)A . There is another other route to the same destination, with a lower distance.B . The route has a lower priority value than another route to the same destination.C . The next-hop IP...
If the default settings are in place, what can be concluded about the conserve mode shown in the exhibit?
Refer to the exhibit, which contains the output of a debug command. If the default settings are in place, what can be concluded about the conserve mode shown in the exhibit?A . FortiGate is currently blocking all new sessions regardless of the content inspection requirements or configuration settings due to...
What changes must the administrator make to force this existing session to immediately start using the other interface?
Refer to the exhibits, which show the configuration on FortiGate and partial internet session information from a user on the internal network. An administrator would like to test session failover between the two service provider connections. What changes must the administrator make to force this existing session to immediately start...
Which two tasks are automated using the Import Configuration wizard on FortiManager? (Choose two.)
Which two tasks are automated using the Import Configuration wizard on FortiManager? (Choose two.)A . Importing firewall address objects from managed devicesB . Importing interface mappings from managed devicesC . Importing static and dynamic route configurations from managed devicesD . Importing devices to FortiManagerView AnswerAnswer: A,B Explanation: https://docs.fortinet.com/document/fortimanager/7.0.5/administration-guide/337348
