Refer to the exhibits to view the firewall policy (Exhibit A) and the antivirus profile (Exhibit B).


Which statement is correct if a user is unable to receive a block replacement message when downloading an infected file for the first time?

• A.The flow-based inspection is used, which resets the last packet to the user.
• B.The volume of traffic being inspected is too high for this model of FortiGate.
• C.The firewall policy performs the full content inspection on the file.
• D.The intrusion prevention security profile needs to be enabled when using flow-based inspection mode.

Comment: *

Name: *

Email: *

Verification: *

An administrator has configured the following settings:

• A.Device detection on all interfaces is enforced for 30 minutes.
• B.Denied users are blocked for 30 minutes.
• C.A session for denied traffic is created.
• D.The number of logs generated by denied traffic is reduced.

Comment: *

Name: *

Email: *

Verification: *

Which three authentication timeout types are availability for selection on FortiGate? (Choose three.)

• A.hard-timeout
• B.auth-on-demand
• C.soft-timeout
• D.new-session
• E.Idle-timeout

Comment: *

Name: *

Email: *

Verification: *

A network administrator has enabled full SSL inspection and web filtering on FortiGate. When visiting any HTTPS websites, the browser reports certificate warning errors. When visiting HTTP websites, the browser does not report errors.
What is the reason for the certificate warning errors?

• A.The CA certificate set on the SSL/SSH inspection profile has not been imported into the browser.
• B.There are network connectivity issues.
• C.FortiGate does not support full SSL inspection when web filtering is enabled.
• D.The browser requires a software update.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Which contains a Performance SLA configuration.
An administrator has configured a performance SLA on FortiGate. Which failed to generate any traffic. Why is FortiGate not generating any traffic for the performance SLA?

• A.There may not be a static route to route the performance SLA traffic.
• B.You need to turn on the Enable probe packets switch.
• C.Participants configured are not SD-WAN members.
• D.The Ping protocol is not supported for the public servers that are configured.

Comment: *

Name: *

Email: *

Verification: *