MoreExam
1. Question Content...
EXPLANATION
Answer: X - EXPLANATION Content.
Question1: View the exhibit, which contains the output of a debug command, and then answer the question below.Which of the following statements about the exhibit are true? (Choose two.)
Question2: The CLI command set intelligent-mode <enable | disable>controls the IPS engine's adaptive scanning behavior. Which of the following statements describes IPS adaptive scanning?
Question3: Which of the following tasks are automated using the Install Wizard on FortiManager? (Choose two.)
Question4: View the following FortiGate configuration.All traffic to the Internet currently egresses from port1. The exhibit shows partial session information for Internet traffic from a user on the internal network:If the priority on route ID 1 were changed from 5 to 20, what would happen to traffic matching that user's session?
Question5: Examine the partial output from the IKE real time debug shown in the exhibit; then answer the question below.Why didn't the tunnel come up?
Question6: Which statements about bulk configuration changes using FortiManager CLI scripts are correct? (Choose two.)
Question7: When using the SSL certificate inspection method for HTTPS traffic, how does FortiGate filter web requests when the browser client does not provide the server name indication (SNI)?
Question8: View the exhibit, which contains the partial output of a diagnose command, and then answer the question below.Based on the output, which of the following statements is correct?
Question9: View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.ike 0: comes 10.0.0.2:500->10.0.0.1:500, ifindex=7....ike 0: IKEv1 exchange=Aggressive id=baf47d0988e9237f/2f405ef3952f6fda len=430 ike 0: inBAF47D0988E9237F2F405EF3952F6FDA0110040000000000000001AE0400003C0000000100000001 000000300101000ike 0:RemoteSite:4: initiator: aggressive mode get 1st response...ike 0:RemoteSite:4: VID RFC 3947 4A131c81070358455C5728F20E95452Fike 0:RemoteSite:4: VID DPD AFCAD71368A1F1C96B8696FC77570100ike 0:RemoteSite:4: VID FORTIGATE 8299031757A36082C6A621DE000502D7ike 0:RemoteSite:4: peer is FortiGate/Fortios (v5 b727)ike 0:RemoteSite:4: VID FRAGMENTATION 4048B7D56EBCE88525E7DE7F00D6C2D3ike 0:RemoteSite:4: VID FRAGMENTATION 4048B7D56EBCE88525E7DE7F00D6C2D3C0000000 ike 0:RemoteSite:4: received peer identifier FQDN 'remore'ike 0:RemoteSite:4: negotiation resultike 0:RemoteSite:4: proposal id = 1:ike 0:RemoteSite:4: protocol id = ISAKMP:ike 0:RemoteSite:4: trans_id = KEY_IKE.ike 0:RemoteSite:4: encapsulation = IKE/noneike 0:RemoteSite:4: type=OAKLEY_ENCRYPT_ALG, val=AES_CBC, key -len=128 ike 0:RemoteSite:4: type=OAKLEY_HASH_ALG, val=SHA.ike 0:RemoteSite:4: type-AUTH_METHOD, val=PRESHARED_KEY.ike 0:RemoteSite:4: type=OAKLEY_GROUP, val=MODP1024.ike 0:RemoteSite:4: ISAKMP SA lifetime=86400ike 0:RemoteSite:4: ISAKMP SA baf47d0988e9237f/2f405ef3952f6fda key 16:B25B6C9384D8BDB24E3DA3DC90CF5E73ike 0:RemoteSite:4: PSK authentication succeededike 0:RemoteSite:4: authentication OKike 0:RemoteSite:4: add INITIAL-CONTACTike 0:RemoteSite:4: encBAF47D0988E9237F405EF3952F6FDA081004010000000000000080140000181F2E48BFD8E9D603F ike 0:RemoteSite:4: outBAF47D0988E9237F405EF3952F6FDA08100401000000000000008C2E3FC9BA061816A396F009A12 ike 0:RemoteSite:4: sent IKE msg (agg_i2send): 10.0.0.1:500-10.0.0.2:500, len=140, id=baf47d0988e9237f/2ike 0:RemoteSite:4: established IKE SA baf47d0988e9237f/2f405ef3952f6fda Which statements about this debug output are correct? (Choose two.)
Question10: What is the purpose of an internal segmentation firewall (ISFW)?
Question11: Which of the following statements are correct regarding application layer test commands? (Choose two.)
Question12: What does the dirtyflag mean in a FortiGate session?
Question13: View the exhibit, which contains the output of a BGP debug command, and then answer the question below.Which of the following statements about the exhibit are true? (Choose two.)
Question14: View the exhibit, which contains the output of a real-time debug, and then answer the question below.Which of the following statements is true regarding this output? (Choose two.)
Question15: An administrator wants to capture ESP traffic between two FortiGates using the built-in sniffer. If the administrator knows that there is no NAT device located between both FortiGates, what command should the administrator execute?
Question16: View the exhibit, which contains the output of a diagnose command, and then answer the question below.Which statements are true regarding the output in the exhibit? (Choose two.)
Question17: View the IPS exit log, and then answer the question below.# diagnose test application ipsmonitor 3ipsengine exit log"pid = 93 (cfg), duration = 5605322 (s) at Wed Apr 19 09:57:26 2017code = 11, reason: manualWhat is the status of IPS on this FortiGate?
Question18: A FortiGate device has the following LDAP configuration:The LDAP user student cannot authenticate. The exhibit shows the output of the authentication real time debug while testing the student account:Based on the above output, what FortiGate LDAP settings must the administer check? (Choose two.)
Question19: An administrator has configured two FortiGate devices for an HA cluster. While testing the HA failover, the administrator noticed that some of the switches in the network continue to send traffic to the former primary unit. The administrator decides to enable the setting link-failed-signalto fix the problem. Which statement is correct regarding this command?
Question20: View the exhibit, which contains the output of diagnose sys session list, and then answer the question below.If the HA ID for the primary unit is zero (0), which statement is correct regarding the output?
Question21: Which real time debug should an administrator enable to troubleshoot RADIUS authentication problems?
Question22: How does FortiManager handle FortiGuard requests from FortiGate devices, when it is configured as a local FDS?
Question23: View the global IPS configuration, and then answer the question below.Which of the following statements is true regarding this configuration?
Question24: A FortiGate is configured as an explicit web proxy. Clients using this web proxy are reposting DNS errors when accessing any website. The administrator executes the following debug commands and observes that the n-dns-timeout counter is increasing:What should the administrator check to fix the problem?
Question25: View these partial outputs from two routing debug commands:Which outbound interface will FortiGate use to route web traffic from internal users to the Internet?
Question26: Two independent FortiGate HA clusters are connected to the same broadcast domain. The administrator has reported that both clusters are using the same HA virtual MAC address. This creates a duplicated MAC address problem in the network. What HA setting must be changed in one of the HA clusters to fix the problem?
Question27: Examine the output of the 'diagnose ips anomaly list' command shown in the exhibit; then answer the question below.Which IP addresses are included in the output of this command?
Question28: Examine the output of the 'diagnose sys session list expectation' command shown in the exhibit; than answer the question below.Which statement is true regarding the session in the exhibit?
Question29: View the exhibit, which contains a partial output of an IKE real-time debug, and then answer the question below.Based on the debug output, which phase-1 setting is enabled in the configuration of this VPN?
Question30: An administrator has configured a FortiGate device with two VDOMs: root and internal. The administrator has also created and inter-VDOM link that connects both VDOMs. The objective is to have each VDOM advertise some routes to the other VDOM via OSPF through the inter-VDOM link. What OSPF configuration settings must match in both VDOMs to have the OSPF adjacency successfully forming?(Choose three.)
Question31: View the exhibit, which contains an entry in the session table, and then answer the question below.Which one of the following statements is true regarding FortiGate's inspection of this session?
Question32: Which of the following conditions must be met for a static route to be active in the routing table? (Choose three.)
Question33: View the exhibit, which contains the output of a web diagnose command, and then answer the question below.Which one of the following statements explains why the cache statistics are all zeros?
Question34: View the central management configuration shown in the exhibit, and then answer the question below.Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243 is experiencing an outage?
Question35: View the exhibit, which contains the output of diagnose sys session stat, and then answer the question below.Which statements are correct regarding the output shown? (Choose two.)
Question36: Examine the output from the 'diagnose vpn tunnel list' command shown in the exhibit; then answer the question below.Which command can be used to sniffer the ESP traffic for the VPN DialUP_0?
Question37: What global configuration setting changes the behavior for content-inspected traffic while FortiGate is in system conserve mode?
Question38: View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.Why didn't the tunnel come up?
Question39: What conditions are required for two FortiGate devices to form an OSPF adjacency? (Choose three.)
Question40: An administrator has configured a dial-up IPsec VPN with one phase 2, extended authentication (XAuth) and IKE mode configuration. The administrator has also enabled the IKE real time debug:diagnose debug application ike-1diagnose debug enableIn which order is each step and phase displayed in the debug output each time a new dial-up user is connecting to the VPN?
