NSE8 試験問題を無料オンラインアクセス

Which command detects where a routing path is broken?

• A.diag debug route <destination>
• B.diag route null
• C.exec route ping <destination>
• D.exec traceroute <destination>

You verified that application control is working from previous configured categories. You just added Skype
on blocked signatures. However, after applying the profile to your firewall policy, clients running Skype
can still connect and use the application.
What are two causes of this problem? (Choose two.)

• A.The FakeSkype.botnet signature is included on your application control sensor.
• B.A client on the network was already connected to the Skype network and serves as relay prior to
  configuration changes to block Skype
• C.The application control database is not updated.
• D.SSL inspection is not enabled.

Referring to the exhibit, which statement is true?

• A.The IPsec negotiation failed because the SPI was unknown.
• B.The packet was protected with an unsupported encryption algorithm.
• C.The packet did not match any of the local IPsec SAs.
• D.The packet failed the HMAC validation.

You want to enable traffic between 2001:db8:1::/64 and 2001:db8:2::/64 over the public 1Pv4 Internet.
Given the CLI configuration shown on the exhibit, which two additional settings are required on this device
to implement tunneling for the 1Pv6 transition? (Choose two.)

• A.1Pv6 firewall policies to allow traffic between the local and remote 1Pv6 subnets.
• B.1Pv4 firewall policies to allow traffic between the local and remote 1Pv6 subnets.
• C.1Pv6 static route to the destination phase2 destination subnet.
• D.1Pv4 static route to the destination phase2 destination subnet.

A customer is authenticating users using a FortiGate and an external LDAP server. The LDAP user, John
Smith, cannot authenticate. The administrator runs the debug command diagnose debug application fnbamd 255 while John Smith attempts the authentication:
Based on the output shown in the exhibit, what is causing the problem?

• A.The user, John Smith, does not belong to any allowed user group.
• B.The user, John Smith, is using an incorrect password.
• C.The user, John Smith, does have an account in the LDAP server.
• D.The LDAP administrator password in the FortiGate configuration is incorrect.