Which two statements describe how IPsec phase 1 main mode is different from aggressive mode when performing IKE negotiation? (Choose two )

1. A. A peer ID is included in the first packet from the initiator, along with suggested security policies.
2. B. XAuth is enabled as an additional level of authentication, which requires a username and password.
3. C. A total of six packets are exchanged between an initiator and a responder instead of three packets.
4. D. The use of Diffie Hellman keys is limited by the responder and needs initiator acceptance.

Correct Answer: BC

What are two benefits of using forward error correction (FEC) in IPsec VPNs? (Choose two.)

1. A. FEC supports hardware offloading.
2. B. FEC improves reliability of noisy links.
3. C. FEC transmits parity packets that can be used to reconstruct packet loss.
4. D. FEC can leverage multiple IPsec tunnels for parity packets transmission.

Correct Answer: BC

Which diagnostic command can you use to show the member utilization statistics measured by performance SLAs for the last 10 minutes?

1. A. diagnose sys sdwan sla-log
2. B. diagnose ays sdwan health-check
3. C. diagnose sys sdwan intf-sla-log
4. D. diagnose sys sdwan log

Correct Answer: A

Refer to the Exhibits:

Exhibit A, which shows the SD-WAN performance SLA and exhibit B shows the health of the participating SD-WAN members.
Based on the exhibits, which statement is correct?

1. A. The dead member interface stays unavailable until an administrator manually brings the interface back.
2. B. Port2 needs to wait 500 milliseconds to change the status from alive to dead.
3. C. Static routes using port2 are active in the routing table.
4. D. FortiGate has not received three consecutive requests from the SLA server configured for port2.

Correct Answer: C

Refer to the exhibits.
Exhibit A

Exhibit B

Exhibit A shows an SD-WAN event log and exhibit B shows the member status and the SD-WAN rule configuration.
Based on the exhibits, which two statements are correct? (Choose two.)

1. A. FortiGate updated the outgoing interface list on the rule so it prefers port2.
2. B. Port2 has the highest member priority.
3. C. Port2 has a lower latency than port1.
4. D. SD-WAN rule ID 1 is set to lowest cost (SLA) mode.

Correct Answer: AC