- All Exams Instant Download
If the administrator knows that there is no NAT device located between both FortiGate devices, which command should the administrator run?
An administrator wants to capture encrypted phase 2 traffic between two FortiGate devices using the built-in sniffer. If the administrator knows that there is no NAT device located between both FortiGate devices, which command should the administrator run?A . diagnose sniffer packet any 'ah'B . diagnose sniffer packet any 'ip...
Which statements are true regarding the output in the exhibit?
Examine the output from the BGP real time debug shown in the exhibit, then the answer the question below. Which statements are true regarding the output in the exhibit? (Choose two.)A . BGP peers have successfully inter changed Open and Keep alive messages.B . Local BGP peer received a prefix...
Which configuration can be used to reduce the number of BGP sessions in an IBGP network?
Which configuration can be used to reduce the number of BGP sessions in an IBGP network?A . Neighbor rangeB . Route reflectorC . Next-hop-selfD . Neighbor groupView AnswerAnswer: B
What can you conclude from the RTT value?
Refer to the exhibit, which shows the output of a diagnose command What can you conclude from the RTT value?A . Its value is incremented with each packet lost.B . Its initial value is statically set to 10.C . It determines which FortiGuard server is used for license validation.D ....
Which statement about FortiGate inspection of this session is true?
Refer to the exhibit, which contains a session table entry. Which statement about FortiGate inspection of this session is true?A . FortiGate applied proxy-based inspection.B . FortiGate applied flow-based NGFW policy-based inspection.C . FortiGate applied flow-based inspection.D . FortiGate forwarded this session without any inspection.View AnswerAnswer: A
Which three conditions are required for two FortiGate devices to form an OSP adjacency? (Choose three.)
Which three conditions are required for two FortiGate devices to form an OSP adjacency? (Choose three.)A . OSPF costs matchB . OSPF peer IDs matchC . Hello and dead intervals matchD . OSPF IP MTUs matchE . IP addresses are in the same subnetView AnswerAnswer: CDE
Which statement about memory conserve mode is true?
Which statement about memory conserve mode is true?A . A FortiGate exits conserve mode when the configured memory use threshold reaches yellow.B . A FortiGate Starts dropping all the new and old sessions when the configured memory use threshold reaches extreme.C . A FortiGate starts dropping new sessions when the...
Based on the above outputs, which is the FortiGuard web filter category for the web site www.fgt99.com?
Examine the partial output from two web filter debug commands; then answer the question below: Based on the above outputs, which is the FortiGuard web filter category for the web site www.fgt99.com?A . Finance and bankingB . General organization.C . Business.D . Information technology.View AnswerAnswer: D
What statements are correct regarding the output?
View the exhibit, which contains the output of a diagnose command, and then answer the question below. What statements are correct regarding the output? (Choose two.)A . This is an expected session created by a session helperB . Traffic in the original direction (coming from the IP address 10.171.122.38) will...
In which order is each step and phase displayed in the debug output each time a new dial-up user is connecting to the VPN?
An administrator has configured a dial-up IPsec VPN with one phase 2, extended authentication (XAuth) and IKE mode configuration. The administrator has also enabled the IKE real time debug: diagnose debug application ike-1 diagnose debug enable In which order is each step and phase displayed in the debug output each...
