Which of the following are valid actions for FortiGuard category based filter in a web filter profile ui proxy-based inspection mode? (Choose two.) A. Warning B. Exempt C. Allow D. Learn
Refer to the exhibit. According to the certificate values shown in the exhibit, which type of entity was the certificate issued to? A. A user B. A root CA C. A bridge CA D. A subordinate
Which statements are true regarding firewall policy NAT using the outgoing interface IP address with fixed port disabled? (Choose two.) A. This is known as many-to-one NAT. B. Source IP is translated to the outgoing interface IP. C. Connections are…
Examine the following web filtering log. Which statement about the log message is true? A. The action for the category Games is set to block. B. The usage quota for the IP address 10.0.1.10 has expired C. The name of…
Examine this output from a debug flow: Why did the FortiGate drop the packet? A. The next-hop IP address is unreachable. B. It failed the RPF check. C. It matched an explicitly configured firewall policy with the action DENY. D.…
If the Issuer and Subject values are the same in a digital certificate, which type of entity was the certificate issued to? A. A CRL B. A person C. A subordinate CA D. A root CA
To complete the final step of a Security Fabric configuration, an administrator must authorize all the devices on which device? A. FortiManager B. Root FortiGate C. FortiAnalyzer D. Downstream FortiGate
View the exhibit. Which of the following statements are correct? (Choose two.) A. This setup requires at least two firewall policies with the action set to IPsec. B. Dead peer detection must be disabled to support this type of IPsec…
Which statements best describe auto discovery VPN (ADVPN). (Choose two.) A. It requires the use of dynamic routing protocols so that spokes can learn the routes to other spokes. B. ADVPN is only supported with IKEv2. C. Tunnels are negotiated…
Examine this PAC file configuration. Which of the following statements are true? (Choose two.) A. Browsers can be configured to retrieve this PAC file from the FortiGate. B. Any web request to the 172.25.120.0/24 subnet is allowed to bypass the…