Why does FortiGate keep TCP sessions in the session table for several seconds, even after both sides (client and server) have terminated the session?
Answer(s): A
TCP provides the ability for one end of a connection to terminate its output while still receiving data from the other end. This is called a half-close. FortiGate unit implements a specific timer before removing an entry in the firewall session table.
Refer to the exhibit. A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come up.Based on the phase 2 configuration shown in the exhibit, what configuration change will bring phase 2 up?
Answer(s): C
Encryption and authentication algorithm needs to match in order for IPSEC be successfully established.
Refer to the exhibit.Examine the intrusion prevention system (IPS) diagnostic command.Which statement is correct if option 5 was used with the IPS diagnostic command and the outcome was a decrease in the CPU usage?
Answer(s): D
https://docs.fortinet.com/document/fortigate/6.2.3/cookbook/232929/troubleshooting-high-cpu-usage
An administrator has configured the following settings:What are the two results of this configuration? (Choose two.)
Answer(s): A,C
https://kb.fortinet.com/kb/documentLink.do?externalID=FD46328
Which CLI command allows administrators to troubleshoot Layer 2 issues, such as an IP address conflict?
Post your Comments and Discuss Fortinet NSE4_FGT-7.0 exam prep with other Community members: