Partial output of FortiOS kernel slabs

（含图）

The partial output of FortiOS kernel slabs is shown.

Which statement about total slab size is true?

The partial output of diagnose sys session stat command is shown.

（含图）

Which statement about the output shown in the exhibit is correct?

The output of the get router info bgp summary command is shown.

（含图）

Which statement regarding adjacencies between the local router and its neighbors is correct?

The output of a BGP debug command is shown.

（含图）

Why has the local router at 172.16.23.58 been unable to establish adjacency with its only neighbor?

（含图）

An administrator has configured a firewall policy to use proxy-based inspection mode.

What could explain the messages observed in the debug flow output?

Debug output -

（含图）

The output of the command diagnose vpn tunnel list is shown.

Reviewing the debug command, what is the current status of the traffic flowing through the tunnel?

Network topology -

（含图）

OSPF database -

（含图）

FGT-1 is an area border router (ABR) that has interfaces in OSPF areas 0.0.0.0 and 0.0.0.5. FGT-3 acts as an

autonomous system border router (ASBR), importing static routes into OSPF. FGT-2 is an internal router with all its

interfaces belonging to area 0.0.0.5. FGT-1 is receiving all advertised routes from FGT-2, however, FGT-3 is not

receiving any of the advertised routes from FGT-1.

What is the most likely reason for this?

The output of the command get router info bgp neighbors 100.64.2.254 advertised-routes is shown.

（含图）

What can you conclude from the output?

Diagnose output -

（含图）

Partial output of command diagnose debug rating command is shown.

Which FDS server will the FortiGate algorithm choose?

（含图）

An IPsec VPN tunnel using IKEv2 was brought up successfully, but when the tunnel rekey takes place the tunnel goes down.

The debug command for IKE was enabled and, in the exhibit, you can review the partial output of the debug IKE while attempting to bring the tunnel up.

What is causing the tunnel to be down?

The output of a BGP debug command is shown.

（含图）

What is the most likely reason that the local FortiGate is not receiving any prefixes from its neighbors?

（含图）

The exhibit shows a session entry.

Which statement about this TCP session is true?

（含图）

Which route will traffic take to get to the 100.65.0.0/24 network considering the routes are all configured with the same distance?

（含图）

If the default settings are in place, what can you conclude about the conserve mode shown in the exhibit?

As a first step, the administrator is attempting to sniff the traffic using the command:

# diagnose sniffer packet any "udp port 500 or udp port 4500 or esp" 4.

After several minutes there is still no output.

What is the most likely reason for this?

（含图）

The administrator did not override the FortiGuard FQDN or IP address in the FortiGate configuration.

Which IP address did FortiGate get when resolving the service.fortiguard.net name?