Exhibit.

Refer to the exhibit, which contains a partial VPN configuration.
What can you conclude from this configuration1?

• A.FortiGate creates separate virtual interfaces for each dial up client.
• B.The VPN should use the dynamic routing protocol to exchange routing information Through the tunnels.
• C.Dead peer detection s disabled.
• D.The routing table shows a single IPSec virtual interface.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

The exhibit shows a prefix list configuration
What can you conclude from the above prefix-list configuration?

• A.The prefix 10.10.0.0/16 will be denied
• B.The prefix 10.10.10.0/24 will be permitted
• C.The prefix 10.0.0.0/8 will be permitted
• D.The prefixes 10.10.0/16 and 10.0.0.0/16 will be denied

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

which contains a partial configuration of the global system. What can you conclude from this output?

• A.NPs and CPs are enabled
• B.Only CPs arc disabled
• C.Only NPs are disabled
• D.NPs and CPs arc disabled

Comment: *

Name: *

Email: *

Verification: *

Exhibit.

Refer to the exhibit, which shows an ADVPN network.
The client behind Spoke-1 generates traffic to the device located behind Spoke-2.
Which first message floes the hub send to Spoke-110 bring up the dynamic tunnel?

• A.Shortcut query
• B.Shortcut reply
• C.Shortcut offer
• D.Shortcut forward

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit, which shows the output of diagnose sys session list.

If the HA ID for the primary device is 0, what will happen if the primary fails and the secondary becomes the primary?

• A.Traffic for this session continues to be permitted on the new primary device after failover, without requiring the client to restart the session with the server.
• B.The secondary device has this session synchronized; however, because application control is applied, the session will be marked dirty and have to be re-evaluated after failover.
• C.The session state will be preserved but the kernel will need to re-evaluate the session due to NAT being applied.
• D.The session will be removed from the session table of the secondary device due to the presence of allowed error packets, which will force the client to restart the session with the server.

Comment: *

Name: *

Email: *

Verification: *