Full Access Fortinet FCSS_NST_SE-7.6 Tutorials

FCSS - Network Security 7.6 Support Engineer Questions and Answers

Question 17

During which phase of IKEv2 does the Diffie-Helman key exchange take place?

IKE_Req_INIT

Create_CHILD_SA

IKE_Auth

IKE_SA_INIT

Question 18

Refer to the exhibit, which shows a session entry.

Which statement about this session is true?

Return traffic to the initiator is sent to 10.1.0.1.

Return traffic to the initiator is sent lo 10.200.1.254.

It is an ICMP session from 10.1.10.10 to 10.200.1.1.

It is an ICMP session from 10.1.10.1 to 10.200.5.1.

Question 19

Refer to the exhibit, which shows the port1 interface configuration on FortiGate and partial session information for ICMP traffic.

What happens to the session information if a routing change occurs that affects this session?

Only the interface and gateway information for dev=7 will be removed.

The session information will not change unless the current route has been removed from the routing table.

The session will be flagged as dirty but no route lookups will be performed.

Sessions involving port7 or port19 will not have their routing information flushed.