Which statements are true regarding firewall policy NAT using the outgoing interface IP address with fixed port disabled? (Choose two.)

• A.This is known as many-to-one NAT.
• B.Port address translation is not used.
• C.Connections are tracked using source port and source MAC address.
• D.Source IP is translated to the outgoing interface IP.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit, which contains a static route configuration.

An administrator created a static route for Amazon Web Services.
What CLI command must the administrator use to view the route?

• A.get internet service route list
• B.get router info routing-table all
• C.diagnose firewall proute list
• D.get router info routing-table database

Comment: *

Name: *

Email: *

Verification: *

In consolidated firewall policies, IPv4 and IPv6 policies are combined in a single consolidated policy. Instead of separate policies. Which three statements are true about consolidated IPv4 and IPv6 policy configuration?
(Choose three.)

• A.The IP version of the sources and destinations in a policy must match.
• B.The policy table in the GUI will be consolidated to display policies with IPv4 and IPv6 sources and destinations.
• C.The Incoming Interface. Outgoing Interface. Schedule, and Service fields can be shared with both IPv4 and IPv6.
• D.The policy table in the GUI can be filtered to display policies with IPv4, IPv6 or IPv4 and IPv6 sources and destinations.
• E.The IP version of the sources and destinations in a firewall policy must be different.

Comment: *

Name: *

Email: *

Verification: *

View the exhibit:

Which the FortiGate handle web proxy traffic rue? (Choose two.)

• A.Traffic between port1-VLAN1 and port2-VLAN1 is allowed by default.
• B.port-VLAN1 is the native VLAN for the port1 physical interface.
• C.Broadcast traffic received in port1-VLAN10 will not be forwarded to port2-VLAN10.
• D.port1-VLAN10 and port2-VLAN10 can be assigned to different VDOMs.

Comment: *

Name: *

Email: *

Verification: *

NGFW mode allows policy-based configuration for most inspection rules. Which security profile's configuration does not change when you enable policy-based inspection?

• A.Antivirus
• B.Web filtering
• C.Application control
• D.Web proxy

Comment: *

Name: *

Email: *

Verification: *