2/144 questions · Unlock full access
Q1Multiple answers

The command `diagnose debug flow` is a powerful tool for troubleshooting traffic issues. What information is typically provided in the output of this command for a single packet traversing the FortiGate? (Select TWO). ```mermaid sequenceDiagram participant Client participant FortiGate participant Server Client->>FortiGate: SYN Packet Note over FortiGate: Start `diag debug flow` FortiGate->>FortiGate: 1. Packet enters interface FortiGate->>FortiGate: 2. Route lookup FortiGate->>FortiGate: 3. Firewall policy match FortiGate->>FortiGate: 4. NAT translation (if any) FortiGate->>FortiGate: 5. Packet exits interface Note over FortiGate: End `diag debug flow` FortiGate->>Server: Forwarded SYN Packet ```

Q2

An administrator wants to configure dead peer detection (DPD) on IPsec VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when there is no inbound traffic.Which DPD mode on FortiGate meets this requirement?