Which two statements about ADVPN are true? (Choose two.)

• A.The hub adds routes based on IKE negotiations.
• B.All FortiGate devices must be in the same autonomous system (AS).
• C.You must configure phase 2 quick mode selectors to 0.0.0.0 0.0.0.0.
• D.You must disable add-route in the hub.

Comment: *

Name: *

Email: *

Verification: *

An administrator configured the following command on FortiGate.
config router ospf
set restart-mode graceful-restart
Which two statements correctly describe the result of the above command? (Choose two.)

• A.FortiGate is configured with graceful restart, and will exit graceful mode, if the network topology changes.
• B.In an HA cluster, FortiGate devices will keep the OSPF routes in their routing table to avoid traffic interruption during an HA failover.
• C.After the default 40 seconds wait time, the OSPF neighbors will resume communication with the restarting router.
• D.The OSPF neighbor that receives the grace link-state advertisement (LSA) will enter into helper mode.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit, which contains a partial configuration of the global system.

What can you conclude from this output?

• A.Only NPs are disabled
• B.Only CPs are disabled
• C.NPs and CPs are enabled
• D.NPs and CPs are disabled

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit, which shows a custom signature.

Which two modifications must you apply to the configuration of this custom signature so that you can save it on FortiGate? (Choose two.)

• A.Add severity.
• B.Add attack_id.
• C.Ensure that the header syntax is F-SBID.
• D.Start options with --.

Comment: *

Name: *

Email: *

Verification: *

Winch two statements about ADVPN are true? (Choose two)

• A.auto-discovery receiver must be set to enable on the Spokes.
• B.Spoke to-spoke traffic never goes through the hub
• C.lt supports NAI for on-demand tunnels
• D.Routing is configured by enabling add-advpn-route

Comment: *

Name: *

Email: *

Verification: *