QUESTION: 41

View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.

Why didn’t the tunnel come up?

The pre-shared keys do not match.
The remote gateway’s phase 2 configuration does not match the local gateway’s phase 2 configuration.
The remote gateway’s phase 1 configuration does not match the local gateway’s phase 1 configuration.
The remote gateway is using aggressive mode and the local gateway is configured to use man mode.

Answer(s): C

Reveal Solution Next Question

An administrator has configured two FortiGate devices for an HA cluster. While testing the HA failover, the administrator noticed that some of the switches in the network continue to send traffic to the former primary unit. The administrator decides to enable the setting link-failed-signal to fix the problem. Which statement is correct regarding this command?

Forces the former primary device to shut down all its non-heartbeat interfaces for one second while the failover occurs.
Sends an ARP packet to all connected devices, indicating that the HA virtual MAC address is reachable through a new master after a failover.
Sends a link failed signal to all connected devices.
Disables all the non-heartbeat interfaces in all the HA members for two seconds after a failover.

Answer(s): A

Reveal Solution Next Question

QUESTION: 43

View these partial outputs from two routing debug commands:

Which outbound interface will FortiGate use to route web traffic from internal users to the Internet?