Refer to the exhibits.

The exhibits show a diagram of a FortiGate device connected to the network, as well as the IP pool configuration and firewall policy objects.
The WAN (port2) interface has the IP address 100.65.0.101/24.
The LAN (port4) interface has the IP address 10.0.11.254/24.
Which IP address will be used to source NAT (SNAT) the traffic, if the user on HQ-PC-1 (10.0.11.50) pings the IP address of BR-FGT (100.65.1.111)

• A.100.65.0.101
• B.100.65.0.49
• C.100.65.0.99
• D.100.65.0.149

Comment: *

Name: *

Email: *

Verification: *

FortiGate is operating in NAT mode and has two physical interfaces connected to the LAN and DMZ networks respectively.
Which two statements about the requirements of connected physical interfaces on FortiGate are true? (Choose two.)

• A.Both interfaces must have the interface role assigned.
• B.Both interfaces must have directly connected routes on the routing table.
• C.Both interfaces must have DHCP enabled and interfaces set to LAN and DMZ roles assigned.
• D.Both interfaces must have IP addresses assigned.

Comment: *

Name: *

Email: *

Verification: *

Which two features of IPsec IKEv1 authentication are supported by FortiGate? (Choose two.)

• A.Extended authentication (XAuth) for faster authentication because fewer packets are exchanged
• B.Pre-shared key and certificate signature as authentication methods
• C.No certificate is required on the remote peer when you set the certificate signature as the authentication method
• D.Extended authentication (XAuth) to request the remote peer to provide a username and password

Comment: *

Name: *

Email: *

Verification: *

Which two settings are required for SSL VPN to function between two FortiGate devices?
(Choose two.)

• A.The server FortiGate requires a CA certificate to verify the client FortiGate certificate.
• B.The client FortiGate requires a manually added route to remote subnets.
• C.The client FortiGate requires a client certificate signed by the CA on the server FortiGate.
• D.The client FortiGate requires the SSL VPN tunnel interface type to connect SSL VPN.

Comment: *

Name: *

Email: *

Verification: *

Which two statements about the Security Fabric rating are true? (Choose two.)

• A.A license is required to obtain an executive summary in the Security Rating section.
• B.The root FortiGate provides executive summaries of all the FortiGate devices in the Security Fabric.
• C.The Security Posture category provides PCI compliance results.
• D.Security Rating Insights are available only in the Security Rating page.

Comment: *

Name: *

Email: *

Verification: *