View the exhibit, which contains a screenshot of some phase-1 settings, and then answer the question below.

The VPN is up, and DPD packets are being exchanged between both IPsec gateways; however, traffic cannot pass through the tunnel. To diagnose, the administrator enters these CLI commands:

However, the IKE real time debug does not show any output. Why?

1. A. The debug output shows phases 1 and 2 negotiations onl
2. B. Once the tunnel is up, it does not show any more output.
3. C. The log-filter setting was set incorrectl
4. D. The VPN’s traffic does not match this filter.
5. E. The debug shows only error message
6. F. If there is no output, then the tunnel is operating normally.
7. G. The debug output shows phase 1 negotiation onl
8. H. After that, the administrator must enable the following real time debug: diagnose debug application ipsec -1.

Correct Answer: B

An administrator has configured the following CLI script on FortiManager, which failed to apply any changes to the managed device after being executed.

Why didn’t the script make any changes to the managed device?

1. A. Commands that start with the # sign are not executed.
2. B. CLI scripts will add objects only if they are referenced by policies.
3. C. Incomplete commands are ignored in CLI scripts.
4. D. Static routes can only be added using TCL scripts.

Correct Answer: A
https://help.fortinet.com/fmgr/50hlp/56/5-6-2/FortiManager_Admin_Guide/1000_Device%20Manager/2400_Sc
A sequence of FortiGate CLI commands, as you would type them at the command line. A comment line starts with the number sign (#). A comment line will not be executed.

Examine the following partial outputs from two routing debug commands; then answer the question below:

Why the default route using port2 is not displayed in the output of the second command?

1. A. It has a lower priority than the default route using port1.
2. B. It has a higher priority than the default route using port1.
3. C. It has a higher distance than the default route using port1.
4. D. It is disabled in the FortiGate configuration.

Correct Answer: C
http://kb.fortinet.com/kb/viewContent.do?externalId=FD32103

Refer to the exhibit, which shows the output of a debug command.

Which two statements about the output are true? (Choose two.)

1. A. The local FortiGate OSPF router ID is 0.0.0.4.
2. B. Port4 is connected to the OSPF backbone area.
3. C. In the network connected to port4, two OSPF routers are down.
4. D. The local FortiGate is the backup designated router.

Correct Answer: AB
Area 0.0.0.0 is the backbone area.

Which two tasks are automated using the Install Wizard on FortiManager? (Choose two.)

1. A. Installing configuration changes to managed devices
2. B. Importing interface mappings from managed devices
3. C. Adding devices to FortiManager
4. D. Previewing pending configuration changes for managed devices

Correct Answer: AD