Refer to the exhibit, which shows a partial web filter profile configuration.


Which action will FortiGate take if a user attempts to access www.dropbox.com, which is categorized as File Sharing and Storage?

• A.FortiGate will block the connection, based on the FortiGuard category based filter configuration.
• B.FortiGate will allow the connection, based onthe URL Filter configuration.
• C.FortiGate will block the connection as an invalid URL.
• D.FortiGate will exempt the connection, based on the Web Content Filter configuration.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit, which shows a physical topology and a traffic log.

The administrator is checking on FortiAnalyzer traffic from the device with IP address10.1.10.1, located behind the FortiGate ISFW device.
The firewall policy in on the ISFW device does not have UTM enabled and the administrator is surprised to see a log with the actionMalware, as shown in the exhibit.
What are the two reasons FortiAnalyzer would display this log? (Choose two.)

• A.Security rating is enabled in ISFW.
• B.ISFW is in a Security Fabric environment.
• C.ISFW is not connected to FortiAnalyzer and must go through NGFW-1.
• D.The firewall policy in NGFW-1 has UTM enabled.

Comment: *

Name: *

Email: *

Verification: *

An administrator must automate a weekly backup of all the FortiGate devices in an enterprise network.
Which two steps must the administrator follow to implement this? (Choose two.)

• A.Create metadata variables for all the FortiGate devices.
• B.Integrate all the FortiGate devices in a Security Fabric environment.
• C.Create an automation stitch.
• D.Create a script to be run in the device database.

Comment: *

Name: *

Email: *

Verification: *

Which statement about memory conserve mode is true?

• A.A FortiGate exits conserve mode when the configured memory use threshold reaches yellow.
• B.A FortiGate Starts dropping all the new and old sessions when the configured memory use threshold reaches extreme.
• C.A FortiGate enters conserve mode when the configured memory use threshold reaches red
• D.A FortiGate starts dropping new sessions when the configured memory use threshold reaches red

Comment: *

Name: *

Email: *

Verification: *

Exhibits:



Refer to the exhibits, which contain the network topology and BGP configuration for a hub.
An administrator is trying to configure ADVPN with a hub-spoke VPN setup using iBGP. All the VPNs are up and connected to the hub. The hub is receiving route information from both spokes over iBGP; however, the spokes are not receiving route information from each other.
What change must the administrator make to the hub BGP configuration so that the routes learned by one spoke are forwarded to the other spokes?

• A.Configure the hub as a route reflector client.
• B.Change the router id to 10.1.0.254.
• C.Make the configuration of remote-as different from the configuration of local-as.
• D.Configure an individual neighbor and remove neighbor-range configuration.

Comment: *

Name: *

Email: *

Verification: *