Refer to the web filter raw logs.

Based on the raw logs shown in the exhibit, which statement is correct?

• A.Social networking web filter category is configured with the action set to authenticate.
• B.Access to the social networking web filter category was explicitly blocked to all users.
• C.The name of the firewall policy is all_users_web.
• D.The action on firewall policy ID 1 is set to warning.

Comment: *

Name: *

Email: *

Verification: *

Which of statement is true about SSL VPN web mode?

• A.The tunnel is up while the client is connected.
• B.It supports a limited number of protocols.
• C.The external network application sends data through the VPN.
• D.It assigns a virtual IP address to the client.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit, which contains a session diagnostic output.

Which statement is true about the session diagnostic output?

• A.The session is a bidirectional UDP connection.
• B.The session is a UDP unidirectional state.
• C.The session is in TCP ESTABLISHED state.
• D.The session is a bidirectional TCP connection.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.


The exhibit contains the configuration for an SD-WAN Performance SLA, as well as the output of diagnose sys virtual-wan-link health-check.
Which interface will be selected as an outgoing interface?

• A.port4
• B.port2
• C.port1
• D.port3

Comment: *

Name: *

Email: *

Verification: *

An administrator wants to configure Dead Peer Detection (DPD) on IPSEC VPN for detecting dead tunnels.
The requirement is that FortiGate sends DPD probes only when no traffic is observed in the tunnel.
Which DPD mode on FortiGate will meet the above requirement?

• A.On Demand
• B.Enabled
• C.On Idle
• D.Disabled

Comment: *

Name: *

Email: *

Verification: *