Refer to the exhibit, which shows the output of a debug command.

Which two statements about the output are true? (Choose two.)

• A. The local FortiGate is the backup designated router.
• B. Port4 is connected to the OSPF backbone area.
• C. In the network connected to port4, two OSPF routers are down.
• D. The local FortiGate OSPF router ID is 0.0.0.4.

Examine the following partial output from two system debug commands; then answer the question below.


Which of the following statements are true regarding the above outputs? (Choose two.)

• A. The Cached value is always the Active value plus the Inactive value
• B. The unit is running a 32-bit FortiOS
• C. The unit is in kernel conserve mode
• D. Kernel indirectly accesses the low memory (LowTotal) through memory paging

A FortiGate is configured as an explicit web proxy. Clients using this web proxy are reposting DNS errors when accessing any website. The administrator executes the following debug commands and observes that the n-dns-timeout counter is increasing:

What should the administrator check to fix the problem?

• A. The connectivity between the client workstations and the DNS server.
• B. That DNS service is enabled in the explicit web proxy interface.
• C. That DNS traffic from client workstations is allowed by the explicit web proxy policies.
• D. The connectivity between the FortiGate unit and the DNS server.

Examine the IPsec configuration shown in the exhibit; then answer the question below.

An administrator wants to monitor the VPN by enabling the IKE real time debug using these commands:
diagnose vpn ike log-filter src-addr4 10.0.10.1
diagnose debug application ike -1
diagnose debug enable
The VPN is currently up, there is no traffic crossing the tunnel and DPD packets are being interchanged between both IPsec gateways. However, the IKE real time debug does NOT show any output. Why isn't there any output?

• A. The IKE real time debug shows the phase 1 negotiation only. For information after that, the administrator must use the IPsec real time debug instead: diagnose debug application ipsec -1.
• B. The log-filter setting is set incorrectly. The VPN's traffic does not match this filter.
• C. The IKE real time shows the phases 1 and 2 negotiations only. It does not show any more output once the tunnel is up.
• D. The IKE real time debug shows error messages only. If it does not provide any output, it indicates that the tunnel is operating normally.

View the exhibit, which contains a screenshot of some phase-1 settings, and then answer the question below.

The VPN is up, and DPD packets are being exchanged between both IPsec gateways; however, traffic cannot pass through the tunnel. To diagnose, the administrator enters these CLI commands:

However, the IKE real time debug does not show any output. Why?

• A. The log-filter setting was set incorrectly. The VPN's traffic does not match this filter.
• B. The debug shows only error messages. If there is no output, then the tunnel is operating normally.
• C. The debug output shows phases 1 and 2 negotiations only. Once the tunnel is up, it does not show any more output.
• D. The debug output shows phase 1 negotiation only. After that, the administrator must enable the following real time debug: diagnose debug application ipsec -1.