View the exhibit, which contains the output of get sys ha status, and then answer the question below.
Which statements are correct regarding the output? (Choose two.)
Correct Answer:AD
An administrator wants to capture ESP traffic between two FortiGates using the built-in sniffer. If the administrator knows that there is no NAT device located between both FortiGates, what command should the administrator execute?
Correct Answer:C
Capture IKE Traffic without NAT:diagnose sniffer packet ‘host and udp port 500’
—————————————————————————————————————-Capture ESP
Traffic without NAT:diagnose sniffer packet any ‘host and esp’
—————————————————————————————————————-Capture IKE
and ESP with NAT-T:diagnose sniffer packet any ‘host and (udp port 500 or udp port 4500)’
A FortiGate device has the following LDAP configuration:
The administrator executed the ‘dsquery’ command in the Windows LDAp server 10.0.1.10, and got the following output:
>dsquery user –samid administrator
“CN=Administrator, CN=Users, DC=trainingAD, DC=training, DC=lab” Based on the output, what FortiGate LDAP setting is configured incorrectly?
Correct Answer:B
https://kb.fortinet.com/kb/viewContent.do?externalId=FD37516
Four FortiGate devices configured for OSPF connected to the same broadcast domain. The first unit is elected as the designated router The second unit is elected as the backup designated router Under normal operation, how many OSPF full adjacencies are formed to each of the other two units?
Correct Answer:B
Which of the following statements are correct regarding application layer test commands? (Choose two.)
Correct Answer:CD
Application layer test commands don’t display info in real time, but they do show statistics and configuration info about a feature or process. You can also use some of these commands to restart a process or execute a change in its operation.