Examine the following log message for IPS and identify the valid responses below. (Select
all that apply.) 2012-07-01 09:54:28 oid=2 log_id=18433 type=ips subtype=anomaly
pri=alert vd=root severity=”critical” src=”192.168.3.168″ dst=”192.168.3.170″ src_int=”port2″
serial=0 status=”detected” proto=1 service=”icmp” count=1 attack_name=”icmp_flood”
icmp_id=”0xa8a4″ icmp_type=”0x08″ icmp_code=”0x00″ attack_id=16777316 sensor=”1″
ref=”http://www.fortinet.com/ids/VID16777316″ msg=”anomaly: icmp_flood, 51 > threshold
50″

Review the CLI configuration below for an IPS sensor and identify the correct statements
regarding this configuration from the choices below. (Select all that apply.)

A. The sensor will include a PCAP file with a trace of the matching packets in the log
message of any matched signature.

Identify the correct properties of a partial mesh VPN deployment: (Select all that apply.)

Review the IPsec phase1 configuration in the Exhibit shown below; then answer the

question following it. Which of the following statements are correct regarding this
configuration? (Select all that apply).

Review the IPsec Phase2 configuration shown in the Exhibit; then answer the question
following it. Which of the following statements are correct regarding this configuration?
(Select all that apply).

Review the static route configuration for IPsec shown in the Exhibit below; then answer the
question following it. Which of the following statements are correct regarding this
configuration? (Select all that apply).

Review the IKE debug output for IPsec shown in the Exhibit below. Which one of the
following statements is correct regarding this output?

Review the IPsec diagnostics output of the command diag vpn tunnel list shown in the
Exhibit. Which of the following statements is correct regarding this output? (Select one
answer).

Review the configuration for FortiClient IPsec shown in the Exhibit below. Which of the
following statements is correct regarding this configuration?

Review the IPsec diagnostics output of the command diag vpn tunnel list shown in the
Exhibit below. Which of the following statements are correct regarding this output? (Select
all that apply.)