- All Exams Instant Download
Which two outcomes are expected if a user in Toronto sends traffic to London?
Refer to the exhibit. Two hub-and-spoke groups are connected through a site-to-site IPsec VPN between Hub 1 and Hub 2. The administrator configured ADVPN on both hub-and-spoke groups. Which two outcomes are expected if a user in Toronto sends traffic to London? (Choose two.)A . London generates an IKE information...
Which two protocols in the IPsec suite are most used for authentication and encryption? (Choose two.)
Which two protocols in the IPsec suite are most used for authentication and encryption? (Choose two.)A . Encapsulating Security Payload (ESP) B. Secure Shell (SSH) C. Internet Key Exchange (IKE) D. Security Association (SA)View AnswerAnswer: A, C
Which diagnostic command can you use to show the member utilization statistics measured by performance SLAs for the last 10 minutes?
Which diagnostic command can you use to show the member utilization statistics measured by performance SLAs for the last 10 minutes?A . diagnose sys sdwan intf-sla-log B. diagnose sys sdwan health-check C. diagnose sys sdwan log D. diagnose sys sdwan sla-logView AnswerAnswer: A
Which two performance SLA protocols enable you to verify that the server response contains a specific value? (Choose two.)
Which two performance SLA protocols enable you to verify that the server response contains a specific value? (Choose two.)A . http B. icmp C. twamp D. dnsView AnswerAnswer: A, D
Which two conclusions for traffic that matches the traffic shaper are true?
Refer to the exhibit. Which two conclusions for traffic that matches the traffic shaper are true? (Choose two.)A . The traffic shaper drops packets if the bandwidth is less than 2500 KBps. B. The measured bandwidth is less than 100 KBps. C. The traffic shaper drops packets if the bandwidth...
Which configuration change is required if the responder FortiGate uses a dynamic routing protocol to exchange routes over IPsec?
Refer to the exhibit. Which configuration change is required if the responder FortiGate uses a dynamic routing protocol to exchange routes over IPsec?A . type must be set to static. B. mode-cfg must be enabled. C. exchange-interface-ip must be enabled. D. add-route must be disabled.View AnswerAnswer: D Explanation: for using...
The administrator wants to understand the expected behavior for traffic matching the SD-WAN rule. Based on the exhibits, what can the administrator expect for traffic matching the SD-WAN rule?
Refer to the exhibits. Exhibit A Exhibit B Exhibit A shows the configuration for an SD-WAN rule and exhibit B shows the respective rule status, the routing table, and the member status. The administrator wants to understand the expected behavior for traffic matching the SD-WAN rule. Based on the exhibits,...
Which CLI command do you use to perform real-time troubleshooting for ADVPN negotiation?
Which CLI command do you use to perform real-time troubleshooting for ADVPN negotiation?A . get router info routing-table all B. diagnose debug application ike C. diagnose vpn tunnel list D. get ipsec tunnel listView AnswerAnswer: B
Based on the FortiGate configuration shown in the exhibits, what issue might you encounter when creating an SD-WAN zone for port1 and port2?
Refer to the exhibit. Exhibit B Exhibit A shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate. Based on the FortiGate configuration shown in the exhibits, what issue might you encounter when creating an SD-WAN zone for port1 and port2?A...
Which two settings can you configure to speed up routing convergence in BGP? (Choose two.)
Which two settings can you configure to speed up routing convergence in BGP? (Choose two.)A . update-source B. set-route-tag C. holdtime-timer D. link-down-failoverView AnswerAnswer: C, D
