An administrator has configured a dial-up IPsec VPN with one phase 2, extended authentication (XAuth) and IKE mode configuration. The administrator has also enabled the IKE real time debug:
diagnose debug application ike-1
diagnose debug enable
In which order is each step and phase displayed in the debug output each time a new dial-up user is connecting to the VPN?

• A.Phase1; IKE mode configuration; XAuth; phase 2.
• B.Phase1; XAuth; IKE mode configuration; phase2.
• C.Phase1; XAuth; phase 2; IKE mode configuration.
• D.Phase1; IKE mode configuration; phase 2; XAuth.

Comment: *

Name: *

Email: *

Verification: *

View the exhibit, which contains a partial routing table, and then answer the question below.

Assuming all the appropriate firewall policies are configured, which of the following pings will FortiGate route?(Choose two.)

• A.Source IP address 10.1.0.24, Destination IP address 10.72.3.20.
• B.Source IP address 10.72.3.52, Destination IP address 10.1.0.254.
• C.Source IP address 10.72.3.27, Destination IP address 10.1.0.52.
• D.Source IP address10.73.9.10, Destination IP address 10.72.3.15.

Comment: *

Name: *

Email: *

Verification: *

View the IPS exit log, and then answer the question below.
# diagnose test application ipsmonitor 3
ipsengine exit log"
pid = 93 (cfg), duration = 5605322 (s) at Wed Apr19 09:57:26 2017
code = 11, reason: manual
What is the status of IPS on this FortiGate?

• A.IPS engine memory consumption has exceeded the model-specific predefined value.
• B.IPS daemon experienced a crash.
• C.There are communication problems between theIPS engine and the management database.
• D.All IPS-related features have been disabled in FortiGate's configuration.

Comment: *

Name: *

Email: *

Verification: *

An administrator wants to capture ESP traffic between two FortiGates using the built-in sniffer. If the administrator knows that there is no NAT device located between both FortiGates, what command should the administrator execute?

• A.diagnose sniffer packet any 'udp port 500'
• B.diagnose sniffer packet any 'udp port 4500'
• C.diagnose sniffer packet any 'esp'
• D.diagnose sniffer packet any 'udp port 500 or udp port 4500'

Comment: *

Name: *

Email: *

Verification: *

View theexhibit, which contains the output of diagnose sys session stat, and then answer the question below.

Which statements are correct regarding the output shown? (Choose two.)

• A.There are 0 ephemeral sessions.
• B.All the sessions in the session table areTCP sessions.
• C.No sessions have been deleted because of memory pages exhaustion.
• D.There are 166 TCP sessions waiting to complete the three-way handshake.

Comment: *

Name: *

Email: *

Verification: *