Refer to the exhibit.

An administrator is running a sniffer command as shown in the exhibit.
Which three pieces of information are included in the sniffer output? (Choose three.)

• A.Interface name
• B.Ethernet header
• C.IP header
• D.Application header
• E.Packet payload

Comment: *

Name: *

Email: *

Verification: *

If the Services field is configured in a Virtual IP (VIP), which statement is true when central NAT is used?

• A.The Services field prevents SNAT and DNAT from being combined in the same policy.
• B.The Services field is used when you need to bundle several VIPs into VIP groups.
• C.The Services field removes the requirement to create multiple VIPs for different services.
• D.The Services field prevents multiple sources of traffic from using multiple services to connect to a single

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 fails to come up. The administrator has also re-entered the pre-shared key on both FortiGate devices to make sure they match.
Based on the phase 1 configuration and the diagram shown in the exhibit, which two configuration changes will bring phase 1 up? (Choose two.)

• A.On HQ-FortiGate, set IKE mode to Main (ID protection).
• B.On both FortiGate devices, set Dead Peer Detection to On Demand.
• C.On HQ-FortiGate, disable Diffie-Helman group 2.
• D.On Remote-FortiGate, set port2 as Interface.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

The exhibit displays the output of the CLI command: diagnose sys ha dump-by vcluster.
Which two statements are true? (Choose two.)

• A.FortiGate SN FGVM010000065036 HA uptime has been reset.
• B.FortiGate devices are not in sync because one device is down.
• C.FortiGate SN FGVM010000064692 is the primary because of higher HA uptime.
• D.FortiGate SN FGVM010000064692 has the higher HA priority.

Comment: *

Name: *

Email: *

Verification: *

Which two statements are true about the RPF check? (Choose two.)

• A.RPF is a mechanism that protects FortiGate and your network from IP spoofing attacks.
• B.The RPF check is run on the first reply packet of any new session.
• C.The RPF check is run on the first sent packet of any new session.
• D.The RPF check is run on the first sent and reply packet of any new session.

Comment: *

Name: *

Email: *

Verification: *