Why does FortiGate Keep TCP sessions in the session table for several seconds, even after both sides (client and server) have terminated the session?

• A.To allow for out-of-order packets that could arrive after the FIN/ACK packets
• B.To finish any inspection operations
• C.To remove the NAT operation
• D.To generate logs

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Based on the administrator profile settings, what permissions must the administrator set to run the diagnose firewall auth list CLI command on FortiGate?

• A.Custom permission for Network
• B.CLI diagnostics commands permission
• C.Read/Write permission for Firewall
• D.Read/Write permission for Log & Report

Comment: *

Name: *

Email: *

Verification: *

Which two attributes are required on a certificate so it can be used as a CA certificate on SSL Inspection?
(Choose two.)

• A.The issuer must be a public CA.
• B.The CA extension must be set to TRUE.
• C.The common name on the subject field must use a wildcard name.
• D.The keyUsage extension must be set to keyCertSign.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.



The exhibit contains a network interface configuration, firewall policies, and a CLI console configuration.
How will FortiGate handle user authentication for traffic that arrives on the LAN interface?

• A.Users from the Sales group will be prompted for authentication and can authenticate successfully with the correct credentials.
• B.Authentication is enforced at a policy level; all users will be prompted for authentication.
• C.If there is a full-through policy in place, users will not be prompted for authentication.
• D.Users from the HR group will be prompted for authentication and can authenticate successfully with the correct credentials.

Comment: *

Name: *

Email: *

Verification: *

Which of statement is true about SSL VPN web mode?

• A.The tunnel is up while the client is connected.
• B.It supports a limited number of protocols.
• C.The external network application sends data through the VPN.
• D.It assigns a virtual IP address to the client.

Comment: *

Name: *

Email: *

Verification: *