Fortinet NSE7_NST-7.2 Practice Test - Questions Answers, Page 4

List of questions
Question 31

Which statement about IKE and IKE NAT-T is true?
Question 32

Refer to the exhibit, which shows the output of a diagnose command
What two conclusions can you draw from the output shown in the exhibit? (Choose two.)
Question 33

Refer to the exhibits.
An administrator is attempting to advertise the network configured on port3. However, FGT-A is not receiving the prefix.
Which two actions can the administrator take to fix this problem'' (Choose two.)
Question 34

Exhibit.
Refer to the exhibit, which shows the omitted output of diagnose npu np6 port-list on a FortiGate1500D.
An administrator is unable to analyze traffic flowing between port1 and port7 using the diagnose sniffer command.
Which two commands allow the administrator to view the traffic? (Choose two.)
A)
B)
C)
D)
Question 35

Refer to the exhibit.
If the default settings are in place, what can you conclude about the conserve mode shown in the exhibit?
Question 36

Exhibit.
Refer to the exhibit, which contains partial output from an IKE real-time debug.
The administrator does not have access to the remote gateway.
Based on the debug output, which configuration change can the administrator make to the local gateway to resolve the phase 1 negotiation error?
Question 37

Which two statements about application-layer test commands ate true? (Choose two.)
Question 38

Which exchange lakes care of DoS protection in IKEv2?
Question 39

Refer to the exhibit. which contains the output of diagnose vpn tunnel list.
Which command will capture ESP traffic for the VPN named DialUp_0?
Question 40

Exhibit.
Refer to the exhibit, which shows partial outputs from two routing debug commands.
Why is the port 2 default route not in the second command output?
Question