Refer to the exhibit, which shows a partial output of a real-time LDAP debug.

What two conclusions can you draw from the output? (Choose two.)

• A.FortiOS performs a bind to the LDAP server using the user's credentials.
• B.FortiOS collects the user group information.
• C.The user was found in the LDAP tree, whose root is TAC.ottawa.fortinet.com.
• D.FortiOS is performing the second step (Search Request) in the LDAP authentication process.

Comment: *

Name: *

Email: *

Verification: *

Exhibit.

Refer to the exhibit, which shows the output of a diagnose command.
What can you conclude about the debug output in this scenario?

• A.Servers with a negative TZ value are less preferred for rating requests.
• B.There is a natural correlation between the value in the FortiGuard-requests field and the value in the Weight field.
• C.The first server provided to FortiGate when it performed a DNS query looking for a list of rating servers, was 121.111.236.179.
• D.FortiGate used 64.26.151.37 as the initial server to validate its contract.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit showing a debug output.

An administrator deployed FSSO in DC Agent Mode but FSSO is failing on FortiGate. Pinging FortiGate from where the collector agent is deployed is successful.
The administrator then produces the debug output shown in the exhibit.
What could be causing this error message?

• A.The FortiGate cannot resolve the active directory server name.
• B.The FortiGate and the collector agent are using different TCP ports.
• C.The collector agent preshared password is mismatched.
• D.The TCP port 445 is blocked between FortiGate and collector agent.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit, which shows a session entry.

Which statement about this session is true?

• A.It is an ICMP session from 10.1.10.1 to 10.200.5.1.
• B.It is an ICMP session from 10.1.10.10 to 10.200.1.1.
• C.Return traffic to the initiator is sent to 10.1.0.1.
• D.Return traffic to the initiator is sent lo 10.200.1.254.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.
The exhibit shows the output from using the command diagnose debug application samld -1 to diagnose a SAML connection.

Based on this output, what can you conclude?

• A.The IdP IP address is 10.1.10.2.
• B.The IdP IP address is 10.1.10.254.
• C.The authentication request is for an SSL VPN connection.
• D.Active Directory is used for authentication.

Comment: *

Name: *

Email: *

Verification: *