An administrator has configured the following settings:

What does the configuration do? (Choose two.)

• A.Creates a session for traffic being denied.
• B.Enforces device detection on all interfaces for 30 minutes.
• C.Blocks denied users for 30 minutes.
• D.Reduces the amount of logs generated by denied traffic.

Comment: *

Name: *

Email: *

Verification: *

Examine this output from a debug flow:

Why did the FortiGate drop the packet?

• A.The next-hop IP address is unreachable.
• B.It failed the RPF check.
• C.It matched an explicitly configured firewall policy with the action DENY.
• D.It matched the default implicit firewall policy.

Comment: *

Name: *

Email: *

Verification: *

In consolidated firewall policies, IPv4 and IPv6 policies are combined in a single consolidated policy. Instead of separate policies.
Which three statements are true about consolidated IPv4 and IPv6 policy configuration? (Choose three.)

• A.The policy table in the GUI will be consolidated to display policies with IPv4 and IPv6 sources and destinations.
• B.The Incoming Interface. Outgoing Interface. Schedule, and Service fields can be shared with both IPv4 and IPv6.
• C.The IP version of the sources and destinations in a firewall policy must be different.
• D.The policy table in the GUI can be filtered to display policies with IPv4, IPv6 or IPv4 and IPv6 sources and destinations.
• E.The IP version of the sources and destinations in a policy must match.

Comment: *

Name: *

Email: *

Verification: *

An administrator has configured a route-based IPsec VPN between two FortiGate devices. Which statement about this IPsec VPN configuration is true?

• A.A phase 2 configuration is not required.
• B.A virtual IPsec interface is automatically created after the phase 1 configuration is completed.
• C.This VPN cannot be used as part of a hub-and-spoke topology.
• D.The IPsec firewall policies must be placed at the top of the list.
  In a route-based configuration, FortiGate automatically adds a virtual interface eith the VPN name (Infrastructure Study Guide, 206)

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

The exhibit displays the output of the CLI command: diagnose sys ha dump-by vcluster.
Which two statements are true? (Choose two.)

• A.FortiGate SN FGVM010000064692 has the higher HA priority.
• B.FortiGate SN FGVM010000065036 HA uptime has been reset.
• C.FortiGate devices are not in sync because one device is down.
• D.FortiGate SN FGVM010000064692 is the primary because of higher HA uptime.

Comment: *

Name: *

Email: *

Verification: *