Which three CLI commands can you use to troubleshoot Layer 3 issues if the issue is in neither the physical layer nor the link layer? (Choose three.)

• A.diagnose sniffer packet any
• B.get system arp
• C.execute ping
• D.diagnose sys top
• E.execute traceroute

Comment: *

Name: *

Email: *

Verification: *

Which two statements are true when FortiGate is in transparent mode? (Choose two.)

• A.By default, all interfaces are part of the same broadcast domain.
• B.The existing network IP schema must be changed when installing a transparent mode.
• C.Static routes are required to allow traffic to the next hop.
• D.FortiGate forwards frames without changing the MAC address.

Comment: *

Name: *

Email: *

Verification: *

When browsing to an internal web server using a web-mode SSL VPN bookmark, which IP address is used as the source of the HTTP request?

• A.remote user's public IP address
• B.The public IP address of the FortiGate device.
• C.The remote user's virtual IP address.
• D.The internal IP address of the FortiGate device.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

The exhibit shows the IPS sensor configuration.
If traffic matches this IPS sensor, which two actions is the sensor expected to take? (Choose two.)

• A.The sensor will reset all connections that match these signatures.
• B.The sensor will block all attacks aimed at Windows servers.
• C.The sensor will allow attackers matching the NTP.Spoofed.KoD.DoS signature.
• D.The sensor will gather a packet log for all matched traffic.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Given the routing database shown in the exhibit, which two statements are correct? (Choose two.)

• A.The port1 and port2 default routes are active in the routing table.
• B.There will be eight routes active in the routing table.
• C.The port3 default route has the lowest metric.
• D.The port3 default route has the highest distance.

Comment: *

Name: *

Email: *

Verification: *