You are performing a packet capture on a FortiGate 2600F with the hyperscale licensing installed. You need to display on screen all egress/ingress packets from the port16 interface that have been offloaded to the NP7.
Which three commands need to be run? (Choose three.)

• A.diagnose npu sniffer filter intf port16
• B.diagnose npu sniffer filter selector 0
• C.diagnose sniffer packet npudbg
• D.diagnose npu sniffer filter dir 2
• E.diagnose sniffer packet port16

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

An administrator wants to implement a multi-chassis link aggregation (MCLAG) solution using two FortiSwitch 448D devices and one FortiGate 3700D. As described in the network topology shown in the exhibit, two links are already connected from the FortiGate to each FortiSwitch.
What is required to implement this solution? (Choose two.)

• A.Replace the FortiGate as this one does not have an ISF.
• B.An ICL link between both FortiSwitch devices needs to be added.
• C.Create two separate link aggregated (LAG) interfaces on the FortiGate side for each FortiSwitch.
• D.Add set fortilink-split-interface disable on the FortiLink interface.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

You have deployed several perimeter FortiGate devices with internal segmentation FortiGate devices behind them. All FortiGate devices are logging to FortiAnalyzer. When you search the logs in FortiAnalyzer for denied traffic, you see numerous log messages, as shown in the exhibit, on your perimeter FortiGate device only.
Which two actions will reduce the number of these log messages? (Choose two.)

• A.Disable DNS events logging from FortiGate in the config log fortianalyzer filter section.
• B.Remove DNS signatures from the IPS profile applied to the outbound firewall policy.
• C.Apply an application control profile to the perimeter FortiGate devices that does not inspect DNS traffic to the outbound firewall policy.
• D.Configure the internal FortiGate devices to communicate to FortiGuard using port 8888.

Comment: *

Name: *

Email: *

Verification: *

Referring to the configuration shown on the exhibit, which three statements are true? (Choose three.)

• A.Traffic logging is disabled in policy 96.
• B.TCP handshake is completed and no FIN/RST has been forwarded.
• C.No packet has hit this session in the last five minutes.
• D.No QoS is applied to this traffic.
• E.The traffic goes through a VIP applied to policy 96.

Comment: *

Name: *

Email: *

Verification: *

Referring to the exhibit, which statement is true?

• A.The packet failed the HMAC validation.
• B.The packet did not match any of the local IPsec SAs.
• C.The packet was protected with an unsupported encryption algorithm.
• D.The IPsec negotiation failed because the SPI was unknown.

Comment: *

Name: *

Email: *

Verification: *