MoreExam
1. Question Content...
EXPLANATION
Answer: X - EXPLANATION Content.
Question1: View the IPS exit log, and then answer the question below.# diagnose test application ipsmonitor 3ipsengine exit log"pid = 93 (cfg), duration = 5605322 (s) at Wed Apr 19 09:57:26 2017code = 11, reason: manualWhat is the status of IPS on this FortiGate?
Question2: Examine the output of the 'get router info bgp summary' command shown in the exhibit; then answer the question below.Which statement can explain why the state of the remote BGP peer 10.200.3.1 is Connect?
Question3: Which of the following statements are true about FortiManager when it is deployed as a local FDS?(Choose two.)
Question4: View the exhibit, which contains the partial output of a diagnose command, and then answer the question below.Based on the output, which of the following statements is correct?
Question5: An administrator has configured the following CLI script on FortiManager, which failed to apply any changes to the managed device after being executed.Why didn't the script make any changes to the managed device?
Question6: An administrator has enabled HA session synchronization in a HA cluster with two members. Which flag is added to a primary unit's session to indicate that it has been synchronized to the secondary unit?
Question7: Examine the output of the 'get router info ospf neighbor' command shown in the exhibit; then answer the question below.Which statements are true regarding the output in the exhibit? (Choose two.)
Question8: View the exhibit, which contains the output of a diagnose command, and the answer the question below.Which statements are true regarding the Weightvalue?
Question9: Examine the output of the 'diagnose sys session list expectation' command shown in the exhibit; than answer the question below.Which statement is true regarding the session in the exhibit?
Question10: An administrator has configured a FortiGate device with two VDOMs: root and internal. The administrator has also created and inter-VDOM link that connects both VDOMs. The objective is to have each VDOM advertise some routes to the other VDOM via OSPF through the inter-VDOM link. What OSPF configuration settings must match in both VDOMs to have the OSPF adjacency successfully forming?(Choose three.)
Question11: Examine the following partial outputs from two routing debug commands; then answer the question below:Why the default route using port2 is not displayed in the output of the second command?
Question12: When does a RADIUS server send an Access-Challenge packet?
Question13: A FortiGate device has the following LDAP configuration:The LDAP user student cannot authenticate. The exhibit shows the output of the authentication real time debug while testing the student account:Based on the above output, what FortiGate LDAP settings must the administer check? (Choose two.)
Question14: Which of the following statements is true regarding a FortiGate configured as an explicit web proxy?
Question15: The logs in a FSSO collector agent (CA) are showing the following error:failed to connect to registry: PIKA1026 (192.168.12.232)What can be the reason for this error?
Question16: View the exhibit, which contains the output of a diagnose command, and then answer the question below.Which statements are true regarding the output in the exhibit? (Choose two.)
Question17: Examine the output of the 'get router info bgp summary' command shown in the exhibit; then answer the question below.Which statements are true regarding the output in the exhibit? (Choose two.)
Question18: View the exhibit, which contains the output of a BGP debug command, and then answer the question below.Which of the following statements about the exhibit are true? (Choose two.)
Question19: An administrator has configured a dial-up IPsec VPN with one phase 2, extended authentication (XAuth) and IKE mode configuration. The administrator has also enabled the IKE real time debug:diagnose debug application ike-1diagnose debug enableIn which order is each step and phase displayed in the debug output each time a new dial-up user is connecting to the VPN?
Question20: View these partial outputs from two routing debug commands:Which outbound interface will FortiGate use to route web traffic from internal users to the Internet?
Question21: An administrator has configured two FortiGate devices for an HA cluster. While testing the HA failover, the administrator noticed that some of the switches in the network continue to send traffic to the former primary unit. The administrator decides to enable the setting link-failed-signalto fix the problem. Which statement is correct regarding this command?
Question22: Which of the following statements are true regarding the SIP session helper and the SIP application layer gateway (ALG)? (Choose three.)
Question23: Which real time debug should an administrator enable to troubleshoot RADIUS authentication problems?
Question24: View the exhibit, which contains a partial web filter profile configuration, and then answer the question below.Which action will FortiGate take if a user attempts to access www.dropbox.com, which is categorized as File Sharing and Storage?
Question25: Examine the partial output from the IKE real time debug shown in the exhibit; then answer the question below.Why didn't the tunnel come up?
Question26: An administrator has decreased all the TCP session timers to optimize the FortiGate memory usage.However, after the changes, one network application started to have problems. During the troubleshooting, the administrator noticed that the FortiGate deletes the sessions after the clients send the SYN packets, and before the arrival of the SYN/ACKs. When the SYN/ACK packets arrive to the FortiGate, the unit has already deleted the respective sessions. Which TCP session timer must be increased to fix this problem?
Question27: What global configuration setting changes the behavior for content-inspected traffic while FortiGate is in system conserve mode?
Question28: What is the purpose of an internal segmentation firewall (ISFW)?
Question29: View the exhibit, which contains a screenshot of some phase-1 settings, and then answer the question below.The VPN is up, and DPD packets are being exchanged between both IPsec gateways; however, traffic cannot pass through the tunnel. To diagnose, the administrator enters these CLI commands:However, the IKE real time debug does not show any output. Why?
Question30: Which of the following tasks are automated using the Install Wizard on FortiManager? (Choose two.)
Question31: View the global IPS configuration, and then answer the question below.Which of the following statements is true regarding this configuration?
Question32: Two independent FortiGate HA clusters are connected to the same broadcast domain. The administrator has reported that both clusters are using the same HA virtual MAC address. This creates a duplicated MAC address problem in the network. What HA setting must be changed in one of the HA clusters to fix the problem?
Question33: View the exhibit, which contains the output of get sys ha status, and then answer the question below.Which statements are correct regarding the output? (Choose two.)
Question34: View the exhibit, which contains the output of diagnose sys session list, and then answer the question below.If the HA ID for the primary unit is zero (0), which statement is correct regarding the output?
Question35: What conditions are required for two FortiGate devices to form an OSPF adjacency? (Choose three.)
Question36: Which of the following conditions must be met for a static route to be active in the routing table? (Choose three.)
Question37: Examine the output from the 'diagnose vpn tunnel list' command shown in the exhibit; then answer the question below.Which command can be used to sniffer the ESP traffic for the VPN DialUP_0?
Question38: View the exhibit, which contains the partial output of an IKE real time debug, and then answer the question below.The administrator does not have access to the remote gateway. Based on the debug output, what configuration changes can the administrator make to the local gateway to resolve the phase 1 negotiation error?
Question39: Examine the output of the 'diagnose ips anomaly list' command shown in the exhibit; then answer the question below.Which IP addresses are included in the output of this command?
Question40: Which statement is true regarding File description (FD) conserve mode?
Question41: View the exhibit, which contains an entry in the session table, and then answer the question below.Which one of the following statements is true regarding FortiGate's inspection of this session?
Question42: A FortiGate device has the following LDAP configuration:The administrator executed the 'dsquery' command in the Windows LDAp server 10.0.1.10, and got the following output:>dsquery user -samid administrator"CN=Administrator, CN=Users, DC=trainingAD, DC=training, DC=lab"Based on the output, what FortiGate LDAP setting is configured incorrectly?
