（含图）

An IPsec VPN tunnel is dropping, as shown by the debug output.

Analyzing the debug output, what could be causing the tunnel to go down?

（含图）

The output of a policy route table entry is shown.

Which type of policy route does the output show?

（含图）

The output of diagnose sys session list command is shown.

If the HA ID for the primary device is 0, what happens if the primary falils and the secondary becomes the primary?

（含图）

FortiGate is showing continuous high CPU usage. During a maintenance window, the CLI command diagnose sys top displays the output shown in the exhibit.

The CLI command diagnose test application ipsmonitor 5 was run, but the CPU usage by daemon ipsengine did not drop.

Which immediate action can you take to reduce the CPU usage effectively?

Which two things should the administrator do to troubleshoot the issue? (Choose two.)

Partial output of the real-time LDAP debug is shown.

（含图）

Which two actions can the administrator take to resolve this issue? (Choose two.)

FortiGate:

# diagnose debug enable

# diagnose sniffer packet any ’udp and port 500’ 4

However, the sniffer does not show any output.

Assuming default configuration values, what are two possible reasons there is no output? (Choose two.)

The output from using the command diagnose debug application samld -1 to diagnose a SAML connection is shown.

Diagnose output

（含图）

Based on this output, which two conclusions can you draw? (Choose two.)

Routing table -

（含图）

The routing table information is shown.

Assuming a default configuration, which three statements about the RPF check on FortiGate are correct? (Choose

three.)

The sniffer log on two FortiGate devices are shown.

（含图）

Based on the information in the log, which two factors explain the output on FortiGate FGT-02?

High Availability configuration status

（含图）

Which two statements about the output are true considering NGFW-1 and NGFW-2 have been up for a week? (Choose two.)

Two entries that were generated in the FSSO collector agent log is shown.

（含图）

Which three conclusions can you draw from these log entries? (Choose three.)

Network topology and a partial routing table

（含图）

Network topology and a partial routing table is shown.

FortiGate has already been configured with a firewall policy that allows all ICMP traffic to flow from port1 to port3.

Which two changes can the administrator perform to ensure the server at 10.4.0.1/24 receives the echo reply from the laptop at 10.1.0.1/24? (Choose two.)

Exhibit 1 -

（含图）

（含图）

The configuration on FortiGate and partial internet session information from a user on the internal network are shown.

An administrator would like to test session failover between the two service provider connections.

Which two changes must the administrator make to force this existing session to immediately start using the other

interface? (Choose two.)

The output from a collector agent log is shown.

（含图）

The collector agent is showing the status of a workstation as “Not Verified”.

What are two common causes for this message? (Choose two.)

（含图）

Which three pieces of information does the diagnose sys top command provide? (Choose three.)