Question 16

Refer to the exhibit, which contains the partial output of a diagnose command.

Based on the output, which two statements arecorrect? (Choose two.)
  • Question 17

    Examine the output from the 'diagnose vpn tunnel list' command shown in the exhibit; then answer the question below.

    Which command can beused to sniffer the ESP traffic for the VPN DialUP_0?
  • Question 18

    An administrator added the following Ipsec VPN to a FortiGate configuration:
    configvpn ipsec phasel -interface
    edit"RemoteSite"
    set type dynamic
    set interface "portl"
    set mode main
    set psksecret ENC LCVkCiK2E2PhVUzZe
    next
    end
    config vpn ipsec phase2-interface
    edit "RemoteSite"
    set phasel name "RemoteSite"
    set proposal 3des-sha256
    next
    end
    However, the phase 1 negotiation is failing. The administrator executed the IKF real time debug while attempting the Ipsec connection. The output is shown in the exhibit.


    What is causing the IPsec problem in the phase 1 ?
  • Question 19

    The logs in a FSSO collector agent (CA) are showing the following error:
    failed to connect to registry: PIKA1026 (192.168.12.232)
    What can be the reason for this error?
  • Question 20

    Examine the following partial outputs from two routing debug commands; then answer the question below.
    # get router info kernel
    tab=254 vf=0 scope=0type=1 proto=11 prio=00.0.0.0/0.0.0.0/0->0.0.0.0/0 pref=0.0.0.0 gwy=10.200.1.254 dev=2(port1) tab=254 vf=0 scope=0type=1 proto=11 prio=10 0.0.0.0/0.0.0.0/0->0.0.0.0/0 pref=0.0.0.0 gwy=10.200.2.254 dev=3(port2) tab=254 vf=0 scope=253type=1 proto=2 prio=0 0.0.0.0/0.0.0.0/.->10.0.1.0/24 pref=10.0.1.254 gwy=0.0.0.0 dev=4(port3)
    # get router info routing-table all s*0.0.0.0/0 [10/0] via 10.200.1.254, portl [10/0] via 10.200.2.254, port2,
    [10/0] dO.0.1.0/24 is directly connected, port3 dO.200.1.0/24 is directly connected, portl d0.200.2.0/24 is directly connected, port2 Which outbound interface or interfaces will be used by this FortiGate to route web traffic from internal users to the Internet?