If the HA ID for the primary unit is zero (0), which statement is correct regarding the output?

View the exhibit, which contains the output of diagnose sys session list, and then answer the question below. If the HA ID for the primary unit is zero (0), which statement is correct regarding the output?A . This session is for HA heartbeat traffic.B . This session is synced with...

June 3, 2020 No Comments READ MORE +

The second unit is elected as the backup designated router Under normal operation, how many OSPF full adjacencies are formed to each of the other two units?

Four FortiGate devices configured for OSPF connected to the same broadcast domain. The first unit is elected as the designated router The second unit is elected as the backup designated router Under normal operation, how many OSPF full adjacencies are formed to each of the other two units?A . 1B...

June 2, 2020 No Comments READ MORE +

Which outbound interface will FortiGate use to route web traffic from internal users to the Internet?

View these partial outputs from two routing debug commands: Which outbound interface will FortiGate use to route web traffic from internal users to the Internet?A . Both port1 and port2B . port3C . port1D . port2View AnswerAnswer: C

June 2, 2020 No Comments READ MORE +

Which statement can explain why the state of the remote BGP peer 10.200.3.1 is Connect?

Examine the output of the ‘get router info bgp summary’ command shown in the exhibit; then answer the question below. Which statement can explain why the state of the remote BGP peer 10.200.3.1 is Connect?A . The local peer is receiving the BGP keepalives from the remote peer but it...

June 2, 2020 No Comments READ MORE +

Which one of the following statements explains why the cache statistics are all zeros?

View the exhibit, which contains the output of a web diagnose command, and then answer the question below. Which one of the following statements explains why the cache statistics are all zeros?A . The administrator has reallocated the cache memory to a separate process.B . There are no users making...

June 2, 2020 No Comments READ MORE +

What should the administrator check to fix the problem?

A FortiGate is configured as an explicit web proxy. Clients using this web proxy are reposting DNS errors when accessing any website. The administrator executes the following debug commands and observes that the n-dns-timeout counter is increasing: What should the administrator check to fix the problem?A . The connectivity between...

June 1, 2020 No Comments READ MORE +

Which statement is true regarding File description (FD) conserve mode?

Which statement is true regarding File description (FD) conserve mode?A . IPS inspection is affected when FortiGate enters FD conserve mode.B . A FortiGate enters FD conserve mode when the amount of available description is less than 5%.C . FD conserve mode affects all daemons running on the device.D ....

May 31, 2020 No Comments READ MORE +

Which of the following conditions must be met for a static route to be active in the routing table? (Choose three.)

Which of the following conditions must be met for a static route to be active in the routing table? (Choose three.)A . The next-hop IP address is up.B . There is no other route, to the same destination, with a higher distance.C . The link health monitor (if configured) is...

May 31, 2020 No Comments READ MORE +

What should the administrator check?

Examine the output from the 'diagnose debug authd fsso list' command; then answer the question below. # diagnose debug authd fsso list ―FSSO logons-IP: 192.168.3.1 User: STUDENT Groups: TRAINI NGAD/USERS Workstation: INTERNAL2. TRAINING. LAB The IP address 192.168.3.1 is NOT the one used by the workstation INTERNAL2. TRAINING. LAB. What...

May 30, 2020 No Comments READ MORE +

Which of the following statements are true regarding the SIP session helper and the SIP application layer gateway (ALG)? (Choose three.)

Which of the following statements are true regarding the SIP session helper and the SIP application layer gateway (ALG)? (Choose three.)A . SIP session helper runs in the kernel; SIP ALG runs as a user space process.B . SIP ALG supports SIP HA failover; SIP helper does not.C . SIP...

May 30, 2020 1 Comment READ MORE +