Refer to the exhibits.



An administrator creates a new address object on the root FortiGate (Local-FortiGate) in the security fabric. After synchronization, this object is not available on the downstream FortiGate (ISFW).
What must the administrator do to synchronize the address object?

• A.Change the csfsetting on both devices to set downstream-access enable.
• B.Change the csfsetting on Local-FortiGate (root) to set fabric object-unification default.
• C.Change the csfsetting on ISFW (downstream) to set authorization-request-type certificate.
• D.Change the csfsetting on ISFW (downstream) to set configuration-sync local.

Correct Answer: A

In a Fortinet Security Fabric setup, the root FortiGate (Local-FortiGate) synchronizes configuration objects, such as address objects, downstream to subordinate FortiGates.
For this synchronization to work, the downstream FortiGate (ISFW) must have the downstream- access option enabled in its CSF (Cooperative Security Fabric) settings.
In the exhibit:
The Local-FortiGate has downstream-access disable, meaning it cannot push configuration

changes downstream.
The ISFW also has downstream-access disable, preventing it from accepting synced objects.

To fix this, downstream-access must be enabled on both FortiGates to allow configuration synchronization.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

The exhibit shows the FortiGuard Category Based Filter section of a corporate web filter profile.
An administrator must block access to download.com, which belongs to the Freeware and Software Downloads category. The administrator must also allow other websites in the same category.
What are two solutions for satisfying the requirement? (Choose two.)

• A.Configure a static URL filter entry for download.com with Type and Action set to Wildcard and Block, respectively.
• B.Configure a separate firewall policy with action Deny and an FQDN address object for*.download.com as destination address.
• C.Configure a web override rating for download.com and select Malicious Websites as the subcategory.
• D.Set the Freeware and Software Downloads category Action to Warning.

Comment: *

Name: *

Email: *

Verification: *