Examine the network diagram shown in the exhibit, and then answer the following question A firewall administrator must configure equal cost multipath(ECMP) routing on FGTI to ensure both port1 and port 3 links are...
View the Exhibit Which statement about the exhibit is true? (Choose two.)A . Broadcast traffic received in port1-VLAN10 will not be forwarded to port2-VLAN 10.B . port-VLAN1 is the native VLAN for the port...
Examine the FortiGate configuration: config user settings set auth-on-demand implicitly end What will happen to unauthenticated users when an active authentication policy is followed by a fall through policy without authentication?A . User authentication...
Which of the following conditions must be met in order for a web browser to trust a webserver certificate signed by a third-party CA?A . The public key of the webserver certificate must be...
Which statements are true regarding firewall policy NAT using the outgoing interface IP address with fixed port disabled? (Choose two.)A . This is known as many-to-one NAC . Source IP is translated to the...
Which of the following statements is true regarding SSL VPN settings for an SSL VPN portal?A . By default, FortiGate uses WINS servers to resolve namesB . By default, the SSL VPN portal requires...
Which statements about antivirus scanning mode are true? (Choose two.)A . In proxy-based inspection mode antivirus buffers the whole file for scarring before sending it to the client.B . In flow-based inspection mode, you...
Examine this output from a debug flow Why did the FortiGate drop the packet?A . The next-hop IP address is unreachableB . It failed the RPF check.C . It matched an explicitly configured firewall...
Which is a requirement for creating an inter-V DOM link between two V DOMs?A . The inspection mode of at least one V DOM must be proxy-based.B . At least one of the V...
Which of the following statements about central NAT are true? (Choose two.)A . IP tool references must be removed from existing firewall policies before enabling central NATB . Central NAT can be enabled or...
