Refer to the exhibit.

Which two statements about the debug output are correct? (Choose two )

• A.Traffic being controlled by the traffic shaper is under 1 Kbps
• B.The debug output shows per-lP shaper values and real-time readings.
• C.This traffic shaper drops traffic that exceeds the set limits.
• D.FortiGate provides statistics and readings based on historical traffic logs.

Comment: *

Name: *

Email: *

Verification: *

Which statement reflects how BGP tags work with SD-WAN rules?

• A.VPN topologies are formed using only BGP dynamic routing with SD-WAN
• B.BGP tags require that the adding of static routes be enabled on all ADVPN interfaces
• C.BGP tags match the SD-WAN rule based on the order that these rules were installed.
• D.Route tags are used for a BGP community and the SD-WAN rules are assigned the same tag

Comment: *

Name: *

Email: *

Verification: *

Which diagnostic command you can use to show interface-specific SLA logs for the last 10 minutes?

• A.diagnose sys virtual-wan-link intf-sla-log
• B.diagnose sys virtual-wan-link log
• C.diagnose sys virtual-wan-link health-check
• D.diagnose sys virtual-wan-link sla-lcg

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Which two statements about the status of the VPN tunnel are true? <Choose two )

• A.VPN static routes are prevented from populating the FortiGate routing table.
• B.FortiGate created a single IPsec virtual interface that is shared by all clients.
• C.100.64.3.1 is one of the remote IP address that comes through index interface 1.
• D.There are separate virtual interfaces for each dial-up client.

Comment: *

Name: *

Email: *

Verification: *

Which two statements describe how IPsec phase 1 main mode is different from aggressive mode when performing IKE negotiation? (Choose two )

• A.The use of Diffie Hellman keys is limited by the responderand needs initiator acceptance
• B.XAuth is enabled as an additional level of authentication which requires a username and password
• C.A total of six packets are exchanged between an initiator and a responder instead of three packets.
• D.A peer ID is included in the first packet from the initiator, along with suggested security policies

Comment: *

Name: *

Email: *

Verification: *