Free certification test prep

NO.38 Exhibit.

Refer to the exhibit, which contains partial output from an IKE real-time debug.
Which two statements about this debug output are correct? (Choose two.)

NO.39 Refer to the exhibit, which shows the output of a policy route table entry.

Which type of policy route does the output show?

NO.40 Exhibit.

Refer to the exhibit, which contains a screenshot of some phase 1 settings.
The VPN is not up. To diagnose the issue, the administrator enters the following CLI commands on an SSH session on FortiGate:

However, the IKE real-time debug does not show any output. Why?

NO.41 Refer to the exhibit.
The exhibit shows the output from using the command diagnose debug application samld -1 to diagnose a SAML connection.

Based on this output, what can you conclude?

NO.42 Refer to the exhibit, which shows the omitted output of a session table entry.

Which two statements are true? (Choose two.)

NO.43 Refer to the exhibit, which shows the output o! the BGP database.

Which two statements are correct? (Choose two.)

NO.44 What are two reasons you might see iprope_in_check() check failed, drop when using the debug flow?
(Choose two.)

NO.45 Which exchange lakes care of DoS protection in IKEv2?

NO.46 Refer to the exhibit, which shows the output o! the BGP database.

Which two statements are correct? (Choose two.)

NO.47 Exhibit.

Refer to the exhibit, which contains a screenshot of some phase 1 settings.
The VPN is not up. To diagnose the issue, the administrator enters the following CLI commands on an SSH session on FortiGate:

However, the IKE real-time debug does not show any output. Why?

NO.48 Refer to the exhibits.

An administrator Is expecting to receive advertised route 8.8.8.8/32 from FGT-A. On FGT-B, they confirm that the route is being advertised and received, however, the route is not being injected into the routing table. What is the most likely cause of this issue?

NO.49 Refer to the exhibit, which shows the modified output of the routing kernel.

Which statement is true?

NO.50 Refer to the exhibit, which shows the output of get router info bgp summary.

Which two statements are true? (Choose two.)

NO.51 Exhibit.

Refer to the exhibit, which shows the output of a session. Which two statements are true? (Choose Iwo.)

NO.52 Which authentication option can you not configure under config user radius on FortiOS?

NO.53 Exhibit.

Refer to the exhibit, which shows the output of diagnose automation test.
What can you observe from the output? (Choose two.)

NO.54 What are two reasons you might see iprope_in_check() check failed, drop when using the debug flow? (Choose two.)

NO.55 Refer to the exhibit, which a network topology and a partial routing table.

FortiGate has already been configured with a firewall policy that allows all ICMP traffic to flow from port1 to port3.
Which changes must the administrator perform to ensure the server at 10.4.0.1/24 receives the echo reply from the laptop at 10.1.0.1/24?

NO.56 Refer to the exhibit, which shows the partial output of command diagnose debug rating.

In this exhibit, which FDS server will the FortiGate algorithm choose?

NO.57 Exhibit.

Refer to the exhibit, which shows a FortiGate configuration.
An administrator is troubleshooting a web filter issue on FortiGate. The administrator has configured a web filter profile and applied it to a policy; however the web filter is not inspecting any traffic that is passing through the policy.
What must the administrator do to fix the issue?

NO.58 Refer to the exhibit, which shows a partial web filter profile configuration.

The URL www.dropbox.com is categorized as File Sharing and Storage.
Which action does FortiGate take if a user attempts to access www.dropbox.com?

NO.59 Refer to the exhibit.

An IPsec VPN tunnel is dropping, as shown by the debug output.
Analyzing the debug output, what could be causing the tunnel to go down?

NO.60 Refer to the exhibit, which shows the output of a BGP debug command.

What can you conclude about the router in this scenario?

NO.61 Exhibit 1.

Exhibit 2.

Refer to the exhibits, which show the configuration on FortiGate and partial internet session information from a user on the internal network.
An administrator would like to lest session failover between the two service provider connections.
Which two changes must the administrator make to force this existing session to immediately start using the other interface? (Choose two.)