Examine the following traffic log; then answer the question below.
date-20xx-02-01 time=19:52:01 devname=master device_id="xxxxxxx"
log_id=0100020007 type=event subtype=system pri critical vd=root service=kemel status=failure msg="NAT port is exhausted." What does the log mean?

• A.The limit for the maximum number of entries in the NAT port table has been reached.
• B.The limit for the maximum number of simultaneous sessions sharing the same NAT port has been reached.
• C.FortiGate does not have any available NAT port for a new connection.
• D.There is not enough available memory in the system to create a new entry in the NAT port table.

Comment: *

Name: *

Email: *

Verification: *

What is the diagnose test application ipsmonitor 99 command used for?

• A.To provide information regarding IPS sessions
• B.To disable the IPS engine
• C.To enable IPS bypass mode
• D.To restart all IPS engines and monitors

Comment: *

Name: *

Email: *

Verification: *

View the global IPS configuration, and then answer the question below.

Which of the following statements is true regarding this configuration?

• A.IPS will use the faster matching algorithm which is only available for units with more than 4 GB memory.
• B.New packets will be passed through without inspection if the IPS socket buffer runs out of memory.
• C.IPS will scan every byte in every session.
• D.FortiGate will spawn IPS engine instances based on the system load.

Comment: *

Name: *

Email: *

Verification: *

Examine the following partial outputs from two routing debug commands; then answer the question below.
# get router info kernel
tab=254 vf=0 scope=0type=1 proto=11 prio=0 0.0.0.0/0.0.0.0/0->0.0.0.0/0 pref=0.0.0.0 gwy=10.200.1.254 dev=2(port1) tab=254 vf=0 scope=0type=1 proto=11 prio=10 0.0.0.0/0.0.0.0/0->0.0.0.0/0 pref=0.0.0.0 gwy=10.200.2.254 dev=3(port2) tab=254 vf=0 scope=253type=1 proto=2 prio=0 0.0.0.0/0.0.0.0/.->10.0.1.0/24 pref=10.0.1.254 gwy=0.0.0.0 dev=4(port3)
# get router info routing-table all s*0.0.0.0/0 [10/0] via 10.200.1.254, portl [10/0] via 10.200.2.254, port2, [10/0] dO.0.1.0/24 is directly connected, port3 dO.200.1.0/24 is directly connected, portl d0.200.2.0/24 is directly connected, port2 Which outbound interface or interfaces will be used by this FortiGate to route web traffic from internal users to the Internet?

• A.port!
• B.port2.
• C.Both portl and port2.
• D.port3.

Comment: *

Name: *

Email: *

Verification: *

View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.

Which statements about this debug output are correct? (Choose two.)

• A.The negotiation is using AES128 encryption with CBC hash.
• B.The initiator has provided remote as its IPsec peer ID.
• C.The remote gateway IP address is 10.0.0.1.
• D.It shows a phase 1 negotiation.

Comment: *

Name: *

Email: *

Verification: *