Question 31

Which CLI command should an administrator use to view the certificate verification process in real time?
  • Question 32

    Refer to the exhibit. Examine the IPsec VPN phase 1 configuration shown in the exhibit. An administrator wants to use certificate-based authentication for an IPsec VPN user.
    Which three configuration changes must you make on FortiGate to perform certificate-based authentication for the IPsec VPN user? (Choose three)
  • Question 33

    Refer to the exhibit

    Examine the FortiGate RSSO configuration shown in the exhibit
    FortiGate is configured to receive RADIUS accounting messages on port3 to authenticate RSSO users The users are located behind port3 and the internet link is connected to port1 FortiGate is processing incoming RADIUS accounting messages successfully and RSSO users are getting associated with the RSSO Group user group However all the users are able to access the internet, and the administrator wants to restrict internet access to RSSO users only Which configuration change should the administrator make to fix the problem?
  • Question 34

    Refer to the exhibits. Examine the troubleshooting outputs shown in the exhibits.
    Users have been reporting issues with the speed of their wireless connection in a particular part of the wireless network. The interface that is having issues is the 2.4 GHz interface that is currently configured on channel 6.
    The administrator of the wireless network has investigated and surveyed the local RF environment using the tools available at the AP and FortiGate.
    Which configuration would improve the wireless connection?

  • Question 35

    Which CLI command should an administrator use to view the certificate verification process in real time?