Preguntas NS7 - Test No. 2

Refer to the exhibit, which contains the output of a BGP debug command. Which statement about the exhibit is true?

• The local router has received a total of three BGP prefixes from all peers.

• The local router has not established a TCP session with 100.64.3.1.

• Since the counters were last reset, the 10.200.3.1 peer has never been down.

• The local router BGP state is OpenConfirm with the 10.127.0.75 peer.

Which action will FortiGate take when using the default settings for SSL certificate inspection, where the server name indication (SNI) does not match either the common name (CN) or any of the subject altemative names (SAN) in the server certificate?

• FortiGate uses the CN information from the Subject field in the server certificate.

• FortiGate uses the first entry listed in the SAN field in the server certificate.

• FortiGate uses the SNI from the user's web browser.

• FortiGate closes the connection because this represents an invalid SSL/TLS configuration.

Which two conditions must be met for a statistic route to be active in the routing table? (Choose two.)

• The link health monitor (if configured) is up.

• There is no other route, to the same destination, with a higher distance.

• The outgoing interface is up.

• The next-hop IP address is up.

Refer to the exhibit, which contains the output of diagnose sys session list.

• This session cannot be synced with the slave unit.

• The inspection of this session has been offloaded to the slave unit.

• The master unit is processing this traffic.

• This session is for HA heartbeat traffic.

What is the diagnose test application ipsmonitor 99 command used for?

• To enable IPS bypass mode

• To provide information regarding IPS sessions

• To disable the IPS engine

• To restart all IPS engines and monitors

View the exhibit, which contains the output of a debug command, and then answer the question below. Which one of the following statements about this FortiGate is correct?

• It is currently in system conserve mode because of high CPU usage.

• It is currently in extreme conserve mode because of high memory usage.

• It is currently in proxy conserve mode because of high memory usage.

• It is currently in memory conserve mode because of high memory usage.

Refer to the exhibit, which contains partial outputs from two routing debug commands. Why is the port2 default route not in the second command's output?

• It has a higher priority value than the default route using port1.

• It is disabled in the FortiGate configuration.

• It has a lower priority value than the default route using port1.

• It has a higher distance than the default route using port1.

Refer to the exhibit, which contains partial output from an IKE real-time debug. The administrator does not have access to the remote gateway. Based on the debug output, which configuration change can the administrator make to the local gateway to resolve the phase 1 negotiation error?

• In the phase 1 network configuration, set the IKE version to 2.

• In the phase 1 proposal configuration, add AES128-SHA128 to the list of encryption algorithms.

• In the phase 1 proposal configuration, add AESCBC-SHA2 to the list of encryption algorithms.

• In the phase 1 proposal configuration, add AES256-SHA256 to the list of encryption algorithms.

Refer to the exhibit, which shows the output of a web filtering diagnose command. Which configuration change would result in non-zero results in the cache statistics section?

• set server-type rating under config system central-management

• set webfilter-cache enable under config system fortiguard

• set webfilter-force-off disable under config system fortiguard

• set ngfw-mode policy-based under config system settings

Refer to the exhibits, which show the configuration on FortiGate and partial session information for internet traffic from a user on the internal network. If the priority on route ID 2 were changed from 10 to 0, what would happen to traffic matching that user session?

• The session would remain in the session table, but its traffic would now egress from both port1 and port2.

• The session would remain in the session table, and its traffic would egress from port2.

• The session would be deleted, and the client would need to start a new session.

• The session would remain in the session table, and its traffic would egress from port1.