Refer to the exhibit, which shows the output of a diagnose command.

What can you conclude from the output shown in the exhibit? (Choose two.)

• A.This is a pinhole session created to allow traffic for a protocol that requires additional sessions to operate through FortiGate.
• B.Traffic in the original direction (coming from the IP address 10.171.121.38) will be routed to the next- hop IP address 10.200.1.1.
• C.Traffic in the original direction (coming from the IP address 10.171.121.38) will be routed to the next- hop IP address 10.0.1.10.
• D.This is an expected session created by the IPS engine.

Comment: *

Name: *

Email: *

Verification: *

A company's users on an IPsec VPN between FortiGate A and B have experienced intermittent issues since implementing VXLAN. The administrator suspects that packets exceeding the 1500-byte default MTU are causing the problems.
In which situation would adjusting the interface's maximum MTU value help resolve issues caused by protocols that add extra headers to IP packets?

• A.Adjust the MTU on interfaces only if FortiGate has the FortiGuard enterprise bundle, which allows MTU modification.
• B.Adjust the MTU on interfaces in all FortiGate devices that support the latest family of Fortinet SPUs:
  NP7, CP9 and SP5.
• C.Adjust the MTU on interfaces in controlled environments where all devices along the path allow MTU interface changes.
• D.Adjust the MTU on interfaces only in wired connections like PPPoE, optic fiber, and ethernet cable.

Comment: *

Name: *

Email: *

Verification: *

An administrator configured the following command on FortiGate.
config router ospf
set restart-mode graceful-restart
Which two statements correctly describe the result of the above command? (Choose two.)

• A.The OSPF neighbor that receives the grace link-state advertisement (LSA) will enter into helper mode.
• B.After the default 40 seconds wait time, the OSPF neighbors will resume communication with the restarting router.
• C.FortiGate is configured with graceful restart, and will exit graceful mode, if the network topology changes.
• D.In an HA cluster, FortiGate devices will keep the OSPF routes in their routing table to avoid traffic interruption during an HA failover.

Comment: *

Name: *

Email: *

Verification: *

Which two configurations are mandatory for an auto-discovery VPN (ADVPN) implementation on a hub? (Choose two.)

• A.set net-device must be disabled to avoid dynamic interface creation.
• B.set add-route must be enabled to add routes.
• C.An overlay IP address with a mask of /32 must be assigned to the IPsec virtual interface.
• D.The remote-ip must be on a different IP address from the overlay subnet.

Comment: *

Name: *

Email: *

Verification: *

An administrator wants to scale the IBGP sessions and optimize the routing table in an IBGP network.
Which parameter should the administrator configure?

• A.network-import-check
• B.ibgp-enforce-multihop
• C.neighbor-group
• D.route-reflector-client

Comment: *

Name: *

Email: *

Verification: *