How will configuring set tcp-mss-sender and set tcp-mss-receiver in a firewall policy affect the size and handling of TCP packets in the network?

• A.The administrator must consider the payload size of the packet and the size of the IP header to configure a correct value in the firewall policy.
• B.Applying commands in a firewall policy determines the largest payload a device can handle in a single TCP segment.
• C.The TCP packet modifies the packet size only if the size of the packet is less than the one the administrator configured in the firewall policy.
• D.The maximum segment size permitted in the firewall policy determines whether TCP packets are allowed or denied.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit, which shows a partial troubleshooting command output.

An administrator is extensively using IPsec on FortiGate. Many tunnels show information similar to the output shown in the exhibit.
What can the administrator conclude?

• A.IPsec SAs cannot be offloaded.
• B.The two IPsec SAs, inbound and outbound, are copied to the NPU.
• C.Only the outbound IPsec SA is copied to the NPU.
• D.Only the inbound IPsec SA is copied to the NPU.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit, which shows a network diagram showing the addition of site 2 with an overlapping network segment to the existing VPN IPsec connection between the hub and site 1.

Which IPsec phase 2 configuration must an administrator make on the FortiGate hub to enable equal-cost multi-path (ECMP) routing when multiple remote sites connect with overlapping subnets?

• A.Set route-overlap to either use-new or use-old
• B.Set net-device to ecmp
• C.Set single-source to enable
• D.Set route-overlap to allow

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit, which shows a revision history window in the FortiManager device layer.

The IT team is trying to identify the administrator responsible for the most recent update in the FortiGate device database.
Which conclusion can you draw about this scenario?

• A.This retrieved process was automatically triggered by a Remote FortiGate Directly (via CLI) script.
• B.The user script_manager is an API user from the Fortinet Developer Network (FDN) retrieving a configuration.
• C.To identify the user who created the event, check it on the Configuration and Installation widget on FortiGate within the FortiManager device layer.
• D.Find the user in the FortiManager system logs and use the type=script command to find the administrator user in the user field.

Comment: *

Name: *

Email: *

Verification: *

An administrator is setting up an ADVPN configuration and wants to ensure that peer IDs are not exposed during VPN establishment.
Which protocol can the administrator use to enhance security?

• A.Use IKEv2, which encrypts peer IDs and prevents exposure.
• B.Opt for SSL VPN web mode because it does not use peer IDs at all.
• C.Choose IKEv1 aggressive mode because it simplifies peer identification.
• D.Stick with IKEv1 main mode because it offers better performance.

Comment: *

Name: *

Email: *

Verification: *