Refer to the exhibit, which contains a TCL script configuration on FortiManager.

An administrator has configured the TCL script on FortiManager, but failed to apply any changes to the
managed device after being executed.
Why did the TCL script fail to make any changes to the managed device?

1. A. Changes in an interface configuration can only be done by CLI script.
2. B. The TCL script must start with #include <>.
3. C. Incomplete commands are ignored in TCL scripts.
4. D. The TCL command run_cmd has not been created.

Correct Answer: D

Examine the partial output from the IKE real time debug shown in the exhibit; then answer the question below.

Why didn’t the tunnel come up?

1. A. IKE mode configuration is not enabled in the remote IPsec gateway.
2. B. The remote gateway’s Phase-2 configuration does not match the local gateway’s phase-2 configuration.
3. C. The remote gateway’s Phase-1 configuration does not match the local gateway’s phase-1 configuration.
4. D. One IPsec gateway is using main mode, while the other IPsec gateway is using aggressive mode.

Correct Answer: C

View these partial outputs from two routing debug commands:

Which outbound interface will FortiGate use to route web traffic from internal users to the Internet?

1. A. Both port1 and port2
2. B. port3
3. C. port1
4. D. port2

Correct Answer: C

Refer to the exhibit, which contains the output of get system ha status. Which two statements about the output are true? (Choose two.)

1. A. The slave configuration is synchronized with the master.
2. B. port7 is used as the HA heartbeat on all devices in the cluster.
3. C. Primary is selected based on the priority configured under config system ha.
4. D. The HA management IP is 169.254.0.2.

Correct Answer: BC

What events are recorded in the crashlogs of a FortiGate device? (Choose two.)

1. A. A process crash.
2. B. Configuration changes.
3. C. Changes in the status of any of the FortiGuard licenses.
4. D. System entering to and leaving from the proxy conserve mode.

Correct Answer: AD
diagnose debug crashlog read
275: 2014-08-05 13:03:53 proxy=acceptor service=imap session fail mode=activated276: 2014-08-05
13:03:53 proxy=acceptor service=ftp session fail mode=activated277: 2014-08-05 13:03:53 proxy=acceptor service=nntp session fail mode=activated278: 2014-08-06 11:05:47 service=kernel conserve=on free=”45034 pages” red=”45874 pages” msg=”Kernel279: 2014-08-06 11:05:47 enters conserve mode”280: 2014-08-06 13:07:16 service=kernel conserve=exit free=”86704 pages” green=”68811 pages”281: 2014-08-06 13:07:16 msg=”Kernel leaves conserve mode”282: 2014-08-06
13:07:16 proxy=imd sysconserve=exited total=1008 free=349 marginenter=201283: 2014-08-06 13:07:16 marginexit=302