Examine this FortiGate configuration:

Examine the output of the following debug command:

Based on the diagnostic outputs above, how is the FortiGate handling the traffic for new sessions that require inspection?

• A.It is allowed and inspected, as long as the only inspection required is antivirus.
• B.It is dropped.
• C.It is allowed and inspected as long as the inspection is flow based
• D.It is allowed, but with no inspection

Comment: *

Name: *

Email: *

Verification: *

Refer to the FortiGuard connection debug output.

Based on the output shown in the exhibit, which two statements are correct? (Choose two.)

• A.One server was contacted to retrieve the contract information.
• B.FortiGate is using default FortiGuard communication settings.
• C.There is at least one server that lost packets consecutively.
• D.A local FortiManager is one of the servers FortiGate communicates with.

Comment: *

Name: *

Email: *

Verification: *

Which three statements about security associations (SA) in IPsec are correct? (Choose three.)

• A.A phase 1 SA is bidirectional, while a phase 2 SA is directional.
• B.Phase 2 SAs are used for encrypting and decrypting the data exchanged through the tunnel.
• C.An SA never expires.
• D.Both the phase 1 SA and phase 2 SA are bidirectional.
• E.Phase 2 SA expiration can be time-based, volume-based, or both.

Comment: *

Name: *

Email: *

Verification: *

How does FortiGate act when using SSL VPN in web mode?

• A.FortiGate acts as an FDS server.
• B.FortiGate acts as an HTTP reverse proxy.
• C.FortiGate acts as DNS server.
• D.FortiGate acts as router.

Comment: *

Name: *

Email: *

Verification: *

Which engine handles application control traffic on the next-generation firewall (NGFW) FortiGate?

• A.Detection engine
• B.Intrusion prevention system engine
• C.Antivirus engine
• D.Flow engine

Comment: *

Name: *

Email: *

Verification: *