Which statement about the exhibit is true?
Question 6 of 35
Refer to the exhibit, which shows the output of a BGP debug command.
Which statement about the exhibit is true?
Which statement about the exhibit is true?
Correct Answer: A
The local router has not established a TCP session with 100.64.3.1, which is indicated by the state 'Active'. 'Active' means the router is trying to establish a TCP connection on port 179 but has not succeeded yet. Other states like 'Idle', 'Connect', 'OpenSent', 'OpenConfirm', and 'Established' would indicate different phases of the BGP session establishment.
Question 7 of 35
Refer to the exhibit, which contains a TCL script configuration on FortiManager.
An administrator has configured the TCL script on FortiManager, but the TCL script failed to apply any changes to the managed device after being run.
Why did the TCL script fail to make any changes to the managed device?
An administrator has configured the TCL script on FortiManager, but the TCL script failed to apply any changes to the managed device after being run.
Why did the TCL script fail to make any changes to the managed device?
Correct Answer: B
The TCL script provided attempts to use the command 'run_cmd,' but this command has not been created or defined anywhere in the script. For the script to work, any command used must be properly defined or imported. Without the definition or creation of 'run_cmd,' the script will fail to execute the commands required to make changes to the managed device.
Question 8 of 35
Refer to the exhibit, which contains the debug output of diagnose dvm device list.
Which two statements about the output shown in the exhibit are correct? (Choose two.)
Which two statements about the output shown in the exhibit are correct? (Choose two.)
Correct Answer: B, D
Reference:
https://docs.fortinet.com/document/fortimanager/7.0.0/upgrade-guide/959309/cli-example-of-diagnose-dvm-device-list
BC
https://docs.fortinet.com/document/fortimanager/7.0.0/upgrade-guide/959309/cli-example-of-diagnose-dvm-device-list
BCQuestion 9 of 35
Refer to the exhibit, which shows a FortiGate configuration.
An administrator is troubleshooting a web filter issue on FortiGate. The administrator has configured a web filter profile and applied it to a policy; however, the web filter is not inspecting any traffic that is passing through the policy.
What must the administrator change to fix the issue?
An administrator is troubleshooting a web filter issue on FortiGate. The administrator has configured a web filter profile and applied it to a policy; however, the web filter is not inspecting any traffic that is passing through the policy.
What must the administrator change to fix the issue?
Correct Answer: B
The administrator must disable 'webfilter-force-off' to allow the FortiGuard web filtering service to operate. When 'webfilter-force-off' is enabled, it turns off the web filtering service, preventing it from inspecting any traffic.
Question 10 of 35
When using the SSL certificate inspection method to inspect HTTPS traffic, how does FortiGate filter web requests when the client browser does not provide the server name indication (SNI) extension?
Correct Answer: A
Reference:
https://checkthefirewall.com/blogs/fortinet/ssl-inspection
A
https://checkthefirewall.com/blogs/fortinet/ssl-inspection
A