Refer to the exhibit, which contains the output of a debug command.

If the default settings are in place, what can be concluded about the conserve mode shown in the exhibit?

• A. FortiGate is currently blocking all new sessions regardless of the content inspection requirements or configuration settings due to high memory use.
• B. FortiGate is currently allowing new sessions that require flow-based or proxy-based content inspection but is not performing inspection on those sessions.
• C. FortiGate is currently blocking new sessions that require flow-based or proxy-based content inspection.
• D. FortiGate is currently allowing new sessions that require flow-based content inspection and blocking sessions that require proxy-based content inspection.

A corporate network allows Internet Access to FSSO users only. The FSSO user student does not have Internet access after successfully logged into the Windows AD network. The output of the 'diagnose debug authd fsso list' command does not show student as an active FSSO user. Other FSSO users can access the Internet without problems. What should the administrator check? (Choose two.)

• A. The user student must belong to one or more of the monitored user groups.
• B. At least one of the student's user groups must be allowed by a FortiGate firewall policy.
• C. The user student must not be listed in the CA's ignore user list.
• D. The student workstation's IP subnet must be listed in the CA's trusted list.

Refer to the exhibit, which contains the output of the diagnose vpn tunnel list.
Which command will capture ESP traffic for the VPN named DialUp_0?

• A. diagnose sniffer packet any 'port 4500'
• B. diagnose sniffer packet any 'esp and host 10.200.3.2'
• C. diagnose sniffer packet any 'ip proto 50'
• D. diagnose sniffer packet any 'host 10.0.10.10'

An administrator added the following Ipsec VPN to a FortiGate configuration:
configvpn ipsec phasel -interface
edit "RemoteSite"
set type dynamic
set interface "portl"
set mode main
set psksecret ENC LCVkCiK2E2PhVUzZe
next
end
config vpn ipsec phase2-interface
edit "RemoteSite"
set phasel name "RemoteSite"
set proposal 3des-sha256
next
end
However, the phase 1 negotiation is failing. The administrator executed the IKF real time debug while attempting the Ipsec connection. The output is shown in the exhibit.


What is causing the IPsec problem in the phase 1 ?

• A. NAT-T settings do not match
• B. The incoming IPsec connection is matching the wrong VPN configuration
• C. The phrase-1 mode must be changed to aggressive
• D. The pre-shared key is wrong

Which two tasks are automated using the Import Configuration wizard on FortiManager? (Choose two.)

• A. Importing firewall address objects from managed devices
• B. Importing static and dynamic route configurations from managed devices
• C. Importing interface mappings from managed devices
• D. Importing devices to FortiManager