A static route is configured for a FortiGate unit from the CLI using the following commands.
config router static
edit 1
set device "wan1"
set distance 20
set gateway 192.168.100.1
next
end
Which of the following conditions are required for this static default route to be displayed in the FortiGate unit's routing table? (Choose two.)

• A.All other default routes should have a lower distance.
• B.The administrative status of the wan1 interface is displayed as down.
• C.The wan1 interface address and gateway address are on the same subnet.
• D.The link status of the wan1 interface is displayed as up.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit, which shows a hub and spokes deployment.

An administrator is deploying several spokes, including the BGP configuration for the spokes to connect to the hub.
Which two commands allow the administrator to minimize the configuration? (Choose two.)

• A.neighbor-group
• B.route-reflector-client
• C.neighbor-range
• D.ibgp-enforce-multihop

Comment: *

Name: *

Email: *

Verification: *

View the exhibit, which contains the output of a diagnose command, and then answer the question below.

What statements are correct regarding the output? (Choose two.)

• A.Traffic in the original direction (coming from the IP address 10.171.122.38) will be routed to the next- hop IP address 10.200.1.1.
• B.This is an expected session created by an application control profile.
• C.This is an expected session created by a session helper
• D.Traffic in the original direction (coming from the IP address 10.171.122.38) will be routed to the next- hop IP address 10.0.1.10

Comment: *

Name: *

Email: *

Verification: *

Which statements regarding banned words are correct? (Choose two.)

• A.The FortiGate can scan web pages and email messages for instances of banned words.
• B.Content is automatically blocked if a single instance of a banned word appears.
• C.The FortiGate updates banned words on a periodic basis.
• D.Banned words can be expressed as simple text, wildcards and regular expressions.

Comment: *

Name: *

Email: *

Verification: *

An administrator is setting up an ADVPN configuration and wants to ensure that peer IDs are not exposed during VPN establishment.
Which protocol can the administrator use to enhance security?

• A.Use IKEv2, which encrypts peer IDs and prevents exposure.
• B.Opt for SSL VPN web mode because it does not use peer IDs at all.
• C.Choose IKEv1 aggressive mode because it simplifies peer identification.
• D.Stick with IKEv1 main mode because it offers better performance.

Comment: *

Name: *

Email: *

Verification: *