NEW QUESTION 43
What is the diagnose test application ipsmonitor 99 command used for?

NEW QUESTION 44
Examine the output of the ‘diagnose debug rating’ command shown in the exhibit; then answer the question below.

Which statement are true regarding the output in the exhibit? (Choose two.)

NEW QUESTION 45
An administrator has configured a FortiGate device with two VDOMs: root and internal. The administrator has also created and inter-VDOM link that connects both VDOMs. The objective is to have each VDOM advertise some routes to the other VDOM via OSPF through the inter-VDOM link .
What OSPF configuration settings must match in both VDOMs to have the OSPF adjacency successfully forming? (Choose three.)

NEW QUESTION 46
Examine the output of the ‘get router info ospf interface’ command shown in the exhibit; then answer the question below.

Which statements are true regarding the above output? (Choose two.)

NEW QUESTION 47
An administrator wants to capture encrypted phase 2 traffic between two FortiGate devices using the built-in sniffer.
If the administrator knows that there is no NAT device located between both FortiGate devices, which command should the administrator run?

NEW QUESTION 48
An administrator has configured a dial-up IPsec VPN with one phase 2, extended authentication (XAuth) and IKE mode configuration. The administrator has also enabled the IKE real time debug:
diagnose debug application ike-1
diagnose debug enable
In which order is each step and phase displayed in the debug output each time a new dial-up user is connecting to the VPN?

NEW QUESTION 49
Examine the output of the ‘get router info bgp summary’ command shown in the exhibit; then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)

NEW QUESTION 50
View the exhibit, which contains a session entry, and then answer the question below.

Which statement is correct regarding this session?

NEW QUESTION 51
View these partial outputs from two routing debug commands:

Which outbound interface will FortiGate use to route web traffic from internal users to the Internet?

NEW QUESTION 52
View the exhibit, which contains a partial routing table, and then answer the question below.

Assuming all the appropriate firewall policies are configured, which of the following pings will FortiGate route? (Choose two.)

NEW QUESTION 53
Which two conditions would prevent a static route from being added to the routing table? (Choose two.)

NEW QUESTION 54
What are two functions of automation stitches? (Choose two.)

NEW QUESTION 55
Refer to the exhibit, which contains the partial output of a diagnose command.

Based on the output, which two statements are correct? (Choose two.)

NEW QUESTION 56
An administrator added the following Ipsec VPN to a FortiGate configuration:
configvpn ipsec phasel -interface
edit “RemoteSite”
set type dynamic
set interface “portl”
set mode main
set psksecret ENC LCVkCiK2E2PhVUzZe
next
end
config vpn ipsec phase2-interface
edit “RemoteSite”
set phasel name “RemoteSite”
set proposal 3des-sha256
next
end
However, the phase 1 negotiation is failing. The administrator executed the IKF real time debug while attempting the Ipsec connection.
The output is shown in the exhibit.


What is causing the IPsec problem in the phase 1?

NEW QUESTION 57
Refer to the exhibit, which contains partial output from an IKE real-time debug.

Which two statements about this debug output are correct? (Choose two.)

NEW QUESTION 58
Examine the partial output from the IKE real time debug shown in the exhibit; then answer the question below.

Why didn’t the tunnel come up?

NEW QUESTION 59
An administrator added the following Ipsec VPN to a FortiGate configuration:
configvpn ipsec phasel -interface
edit “RemoteSite”
set type dynamic
set interface “portl”
set mode main
set psksecret ENC LCVkCiK2E2PhVUzZe
next
end
config vpn ipsec phase2-interface
edit “RemoteSite”
set phasel name “RemoteSite”
set proposal 3des-sha256
next
end
However, the phase 1 negotiation is failing. The administrator executed the IKF real time debug while attempting the Ipsec connection. The output is shown in the exhibit.


What is causing the IPsec problem in the phase 1 ?

NEW QUESTION 60
An administrator has decreased all the TCP session timers to optimize the FortiGate memory usage. However, after the changes, one network application started to have problems. During the troubleshooting, the administrator noticed that the FortiGate deletes the sessions after the clients send the SYN packets, and before the arrival of the SYN/ACKs. When the SYN/ACK packets arrive to the FortiGate, the unit has already deleted the respective sessions. Which TCP session timer must be increased to fix this problem?

NEW QUESTION 61
Which two statements about the Security Fabric are true? (Choose two.)

NEW QUESTION 62
Which statement is true regarding File description (FD) conserve mode?

NEW QUESTION 63
Refer to the exhibit, which contains partial outputs from two routing debug commands.

Why is the port2 default route not in the second command’s output?

NEW QUESTION 64
Refer to the exhibit, which contains a TCL script configuration on FortiManager.

NEW QUESTION 65
Refer to the exhibit, which contains the partial output of a diagnose command.

Based on the output, which two statements are correct? (Choose two.)

NEW QUESTION 66
View the exhibit, which contains the output of a diagnose command, and then answer the question below.

What statements are correct regarding the output? (Choose two.)