Which two statements about IPsec authentication on FortiGate are correct? (Choose two.)

• A.For a stronger authentication, you can also enable extended authentication (XAuth) to request the remote peer to provide a username and password
• B.FortiGate supports pre-shared key and signature as authentication methods.
• C.Enabling XAuth results in a faster authentication because fewer packets are exchanged.
• D.A certificate is not required on the remote peer when you set the signature as the authentication method.

Comment: *

Name: *

Email: *

Verification: *

An administrator is configuring an IPsec VPN between site A and site B.
The Remote Gateway setting in both sites has been configured as Static IP Address.
For site A, the local quick mode selector is 192.168.1.0/24 and the remote quick mode selector is 192.168.2.0/24.
Which subnet must the administrator configure for the local quick mode selector for site B?

• A.192.168.1.0/24
• B.192.168.3.0/24
• C.192.168.0.0/24
• D.192.168.2.0/24

Comment: *

Name: *

Email: *

Verification: *

An administrator has configured a route-based IPsec VPN between two FortiGate devices. Which statement about this IPsec VPN configuration is true?

• A.A phase 2 configuration is not required.
• B.This VPN cannot be used as part of a hub-and-spoke topology.
• C.A virtual IPsec interface is automatically created after the phase 1 configuration is completed.
• D.The IPsec firewall policies must be placed at the top of the list.

Comment: *

Name: *

Email: *

Verification: *

An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)

• A.The interface has been configured for one-arm sniffer.
• B.The interface is a member of a virtual wire pair.
• C.The operation mode is transparent.
• D.The interface is a member of a zone.
• E.Captive portal is enabled in the interface.

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements about backing up logs from the CLI and downloading logs from the GUI are true? (Choose two.)

• A.Log backups from the CLI cannot be restored to another FortiGate.
• B.Log downloads from the GUI are limited to the current filter view
• C.Log downloads from the GUI are stored as LZ4 compressed files.
• D.Log backups from the CLI can be configured to upload to FTP as a scheduled time

Comment: *

Name: *

Email: *

Verification: *