A. The existing session table entry has been updated with the app_id and the firewall policy table needs to be checked for a match.

B. The URL category for this session has been updated by FortiGuard and the session needs to be checked against the policy again to ensure proper web filtering is applied.

C. Traffic has been identified as coming from an application that is not allowed and the relevant replacement message needs to be displayed to the user, if configured.

D. The application or URL category is unknown and needs to be rescanned by the IPS engine to try to identify the Layer 7 details.

A. FortiGate uses the requested URL from the user's web browser.

B. FortiGate switches to the full SSL inspection method to decrypt the data.

C. FortiGate uses CN information from the Subject field in the server's certificate.

D. FortiGate blocks the request without any further inspection.

A. They are used to filter real-time debugs.

B. They display real-time application debugs.

C. Some of them can be used to restart an application.

D. Some of them display statistics and configuration information about a feature or process.

A. The local BGP peer has received a total of three BGP prefixes.

B. Since the BGP counters were last reset, the BGP peer 10.200.3.1 has never been down.

C. The local BGP peer has not established a TCP session to the BGP peer 10.200.3.1.

D. For the peer 10.125.0.60, the BGP state of is Established.

A. The encapsulation method for phase 2 is set to none on local and remote gateways.

B. The Diffie-Hellman group does not match on the local and remote gateways.

C. The local gateway has configured less secure encryption and hashing algorithms compared to the remote gateway.

D. The proposal ID does not match between local and remote gateways.

A. Master is selected because it is the only device in the cluster.

B. The HA management IP is 169.254.0.2.

C. port 7 is used the HA heartbeat on all devices in the cluster.

D. The slave configuration is not synchronized with the master.

A. User student is not found in the LDAP server.

B. User student is using a wrong password.

C. The FortiGate has been configured with the wrong password for the LDAP administrator.

D. The FortiGate has been configured with the wrong authentication schema.

A. FortiGate enters conserve mode when the system memory reaches the configured extreme threshold.

B. FortiGate exits conserve mode when the system memory goes below the configured green threshold.

C. FortiGate starts dropping all new sessions when the system memory reaches the configured red threshold.

D. FortiGate starts taking the configured action for new sessions requiring content inspection when the system memory reaches the configured red threshold.

A. The local router has received a total of three BGP prefixes from all peers.

B. Since the counters were last reset, the 10.200.3.1 peer has never been down.

C. The local router has not established a TCP session with 100.64.3.1.

D. The local router BGP state is OpenConfirm with the 10.127.0.75 peer.

A. It is currently in proxy conserve mode because of high memory usage.

B. It is currently in memory conserve mode because of high memory usage.

C. It is currently in extreme conserve mode because of high memory usage.

D. It is currently in system conserve mode because of high CPU usage.

A. The log-filter setting is incorrect. The VPN traffic does not match this filter.

B. The administrator must enable the following real-time debug: diagnose debug application ipsec -1.

C. The debug shows only error messages. If there is no output, then the phase 1 and phase 2 configurations match.

D. The administrator must also run the command diagnose debug enable.