View the exhibit.

Which of the following statements are correct? (Choose two.)

• A.This setup requires at least two firewall policies with the action set to IPsec.
• B.Dead peer detection must be disabled to support this type of IPsec setup.
• C.The TunnelB route is the primary route for reaching the remote site. The TunnelA route is used only if the TunnelB VPN is down.
• D.This is a redundant IPsec setup.

Comment: *

Name: *

Email: *

Verification: *

Which of the following SD-WAN load balancing method use interface weight value to distribute traffic? (Choose two.)

• A.Source IP
• B.Spillover
• C.Volume
• D.Session

Comment: *

Name: *

Email: *

Verification: *

Which two settings are required for SSL VPN to function between two FortiGate devices? (Choose two.)

• A.The client FortiGate requires a client certificate signed by the CA on the server FortiGate.
• B.The client FortiGate requires a manually added route to remote subnets.
• C.The client FortiGate uses the SSL VPN tunnel interface type to connect SSL VPN.
• D.The server FortiGate requires a CA certificate to verify the client FortiGate certificate.

Comment: *

Name: *

Email: *

Verification: *

Which statement about the IP authentication header (AH) used by IPsec is true?

• A.AH provides strong data integrity but weak encryption.
• B.AH provides data integrity bur no encryption.
• C.AH does not provide any data integrity or encryption.
• D.AH does not support perfect forward secrecy.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit, which contains a static route configuration.
An administrator created a static route for Amazon Web Services.

Which CLI command must the administrator use to view the route?

• A.get router info routing-table database
• B.diagnose firewall route list
• C.get internet-service route list
• D.get router info routing-table all

Comment: *

Name: *

Email: *

Verification: *