Which two statements about FortiManager is true when it is deployed as a local FDS? (Choose two.)
Correct Answer:AD
An administrator wants to capture ESP traffic between two FortiGates using the built-in sniffer. If the administrator knows that there is no NAT device located between both FortiGates, what command should the administrator execute?
Correct Answer:C
Capture IKE Traffic without NAT:diagnose sniffer packet ‘host and udp port 500’
—————————————————————————————————————-Capture ESP
Traffic without NAT:diagnose sniffer packet any ‘host and esp’
—————————————————————————————————————-Capture IKE
and ESP with NAT-T:diagnose sniffer packet any ‘host and (udp port 500 or udp port 4500)’
View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.
Which statements about this debug output are correct? (Choose two.)
Correct Answer:BD
View the exhibit, which contains a partial web filter profile configuration, and then answer the question below.
Which action will FortiGate take if a user attempts to access www.dropbox.com, which is categorized as File Sharing and Storage?
Correct Answer:B
fortigate does it in order Static URL -> FortiGuard – > Content -> Advanced (java, cookie removal..)so block it in first step
Which two statements about OCVPN are true? (Choose two.)
Correct Answer:AB