An administrator wants to configure dead peer detection (DPD) on IPsec VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when there is no inbound traffic.
Which DPD mode on FortiGate meets this requirement?

• A.Enabled
• B.On Idle
• C.Disabled
• D.On Demand

Comment: *

Name: *

Email: *

Verification: *

A FortiGate administrator is required to reduce the attack surface on the SSL VPN portal.
Which SSL timer can you use to mitigate a denial of service (DoS) attack?

• A.SSL VPN http-request-header-timeout
• B.SSL VPN dtls-hello-timeout
• C.SSL VPN login-timeout
• D.SSL VPN idle-timeout

Comment: *

Name: *

Email: *

Verification: *

A network administrator is reviewing firewall policies in both Interface Pair View and By Sequence View.
The policies appear in a different order in each view.
Why is the policy order different in these two views?

• A.Policies in Interface Pair View are prioritized by security levels, while By Sequence View strictly follows the administrator's manual ordering.
• B.By Sequence View groups policies based on rule priority, while Interface Pair View always follows the order of traffic logs.
• C.Interface Pair View sorts policies based on matching interfaces, while By Sequence View shows the actual processing order of rules.
• D.The firewall dynamically reorders policies in Interface Pair View based on recent traffic patterns, but By Sequence View remains static.

Comment: *

Name: *

Email: *

Verification: *

What are three key routing principles in SD-WAN? (Choose three.)

• A.By default. SD-WAN rules are skipped if the included SD-WAN members do not have a valid route to the destination.
• B.SD-WAN rules have precedence over any other type of routes.
• C.By default. SD-WAN rules are skipped if only one route to the destination is available.
• D.Regular policy routes have precedence over SD-WAN rules.
• E.By default. SD-WAN rules are skipped if the best route to the destination is not an SD-WAN member.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibits.



FGT-1 and FGT-2 are updated with HA configuration commands shown in the exhibit.
What would be the expected outcome in the HA cluster?

• A.FGT-2 will take over as the primary because it has the override enablesetting and higher priority than FGT-1.
• B.FGT-1 will synchronize the override disablesetting with FGT-2.
• C.The HA cluster will become out of sync because the overridesetting must match on all HA members.
• D.FGT-1 will remain the primary because FGT-2 has lower priority.

Comment: *

Name: *

Email: *

Verification: *