Which CLI command allows administrators to troubleshoot Layer 2 issues, such as an IP address conflict?

• A.get system status
• B.get system performance status
• C.diagnose sys top
• D.get system arp

Comment: *

Name: *

Email: *

Verification: *

Which two statements are correct regarding FortiGate FSSO agentless polling mode? (Choose two.)

• A.FortiGate points the collector agent to use a remote LDAP server.
• B.FortiGate uses the AD server as the collector agent.
• C.FortiGate uses the SMB protocol to read the event viewer logs from the DCs.
• D.FortiGate queries AD by using the LDAP to retrieve user group information.

Comment: *

Name: *

Email: *

Verification: *

Which statements best describe auto discovery VPN (ADVPN). (Choose two.)

• A.Every spoke requires a static tunnel to be configured to other spokes so that phase 1 and phase 2 proposals are defined in advance.
• B.It requires the use of dynamic routing protocols so that spokes can learn the routes to other spokes.
• C.Tunnels are negotiated dynamically between spokes.
• D.ADVPN is only supported with IKEv2.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibits.
Exhibit A shows a network diagram. Exhibit B shows the firewall policy configuration and a VIP object configuration.
The WAN (port1) interface has the IP address 10.200.1.1/24.
The LAN (port3) interface has the IP address 10.0.1.254/24.


If the host 10.200.3.1 sends a TCP SYN packet on port 10443 to 10.200.1.10, what will the source address, destination address, and destination port of the packet be, after FortiGate forwards the packet to the destination?

• A.10.0.1.254, 10.0.1.10, and 443, respectively
• B.10.200.3.1, 10.0.1.10, and 443, respectively
• C.10.0.1.254, 10.0.1.10, and 10443, respectively

Comment: *

Name: *

Email: *

Verification: *

What inspection mode does FortiGate use if it is configured as a policy-based next-generation firewall (NGFW)?

• A.Full Content inspection
• B.Proxy-based inspection
• C.Certificate inspection
• D.Flow-based inspection

Comment: *

Name: *

Email: *

Verification: *