Which statement about network processor (NP) offloading is true?

• A.When NP acceleration is enabled, firewall sessions may not offload if proxy-based security profiles are included in the firewall policy.
• B.You can disable the NP for each firewall policy using the command np-acceleration set to loose.
• C.The FortiGate CPU offloads all firewall sessions that require FortiOS session helper to the network processing unit (NPU).
• D.For UDP traffic, the FortiGate CPU offloads the first packet to identify it as fast-path traffic.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit, which contains the partial output of an OSPF command.

An administrator is checking the OSPF status of a FortiGate device and receives the output shown in the exhibit.
Which statement on this FortiGate device is correct?

• A.The FortiGate device can inject external routing information.
• B.The FortiGate device is in the area 0.0.0.5.
• C.The FortiGate device does not support OSPF ECMP.
• D.The FortiGate device is a backup designated router.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit, which shows the VDOM section of a FortiGate device.

An administrator discovers that webfilter stopped working in Core1 and Core2 after a maintenance window.
Which two reasons could explain why webfilter stopped working? (Choose two.)

• A.The root VDOM does not have access to FortiManager in a closed network.
• B.The root VDOM does not have a VDOM link to connect with the Corel and Core2 VDOMs.
• C.The Core1 and Core2 VDOMs must also be enabled as Management VDOMs to receive FortiGuard updates
• D.The root VDOM does not have access to any valid public FDN.

Comment: *

Name: *

Email: *

Verification: *

Which of the following conditions must be met for a static route to be active in the routing table?
(Choose three.)

• A.The next-hop IP address is up.
• B.The outgoing interface is up.
• C.The link health monitor (if configured) is up.
• D.There is no other route, to the same destination, with a higher distance.
• E.The next-hop IP address belongs to one of the outgoing interface subnets.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit, which shows an OSPF network.

Which types of link-state advertisements (LSA) will NGFW-1 send, if it is a backup designated router (BDR)?

• A.NGFW-1 will send type 1 and type 2 LSAs.
• B.NGFW-1 will send type 1 and type 4 LSAs.
• C.NGFW-1 will send type 1 and type 5 LSAs.
• D.NGFW-1 will send type 1 and type 3 LSAs.

Comment: *

Name: *

Email: *

Verification: *