NSE7_FSN_AR-7.6最も有効な質問と解答で勉強

Exhibit.

Refer to the exhibit, which contains a screenshot of some phase 1 settings.
The VPN is not up. To diagnose the issue, the administrator enters the following CLI commands on an SSH session on FortiGate:

However, the IKE real-time debug does not show any output. Why?

• A. The debug shows only error messages. If there is no output, then the phase 1 and phase 2 configurations match.
• B. The administrator must also run the command diagnose debug enable.
• C. Replace diagnose debug application ike -1 with diagnose debug application ipsec -1.
• D. The log-filter setting is incorrect. The VPN traffic does not match this filter.

Refer to the exhibit.

The output from a collector agent log is shown. The collector agent is showing the status of a workstation as Not Verified. What are two common causes for this message? (Choose two.)

• A. DNS cannot resolve the workstation name.
• B. The workstation remote registry service is not running.
• C. The workstation has come out of hibernate mode.
• D. Traffic to ports 139 and 445 is blocked.

Refer to the exhibits.

FGT-1 is an area border router (ABR) that has interfaces in OSPF areas 0.0.0.0 and 0.0.0.5. FGT-3 acts as an autonomous system border router (ASBR), importing static routes into OSPF. FGT-2 is an internal router with all its interfaces belonging to area 0.0.0.5. FGT-1 is receiving all advertised routes from FGT-2, however, FGT-3 is not receiving any of the advertised routes from FGT-1. What is the most likely reason for this?
(Choose one answer)

• A. FGT-3 and FGT-2 have not formed an OSPF adjacency yet.
• B. FGT-2 is configured with a distribution list to block all advertised routes from FGT-3.
• C. Area 0.0.0.5 is configured not to propagate type 5 LSAs.
• D. IP protocol 89 is blocked between FGT-1 and FGT-3.

Which two statements are true regarding heartbeat messages sent from an FSSO collector agent to FortiGate?
(Choose two.)

• A. The heartbeat messages can be seen in the collector agent logs.
• B. The heartbeat messages must be manually enabled on FortiGate.
• C. The heartbeat messages can be seen on FortiGate using the real-lime FSSO debug.
• D. The heartbeat messages can be seen using the command diagnose debug authd fsso list.

During the last network migration, the IT department discovered that all-zero phase selectors in phase 2 IPsec configurations impacted network operations.
What are two valid recommendations to prevent potential invalid paths during future migrations? (Choose two.)

• A. Configure an IP address on the IPsec interface of each firewall to establish unique peer connections and avoid impacting network operations.
• B. Configure the VPN with the exact network segments that will be encrypted in the phase 2 selectors.
• C. Configure an IPsec aggregate to create redundancy between each firewall peer.
• D. Configure routing protocols to specify allowed subnets over the tunnel.