An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)

• A.The interface has been configured for one-arm sniffer.
• B.The interface is a member of a virtual wire pair.
• C.The operation mode is transparent.
• D.The interface is a member of a zone.
• E.Captive portal is enabled in the interface.

Comment: *

Name: *

Email: *

Verification: *

Which statement about the IP authentication header (AH) used by IPsec is true?

• A.AH does not provide any data integrity or encryption.
• B.AH provides strong data integrity but weak encryption.
• C.AH provides data integrity bur no encryption.
• D.AH does not support perfect forward secrecy.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibits.


The exhibits show the SSL and authentication policy (Exhibit A) and the security policy (Exhibit B) tor Facebook.
Users are given access to the Facebook web application. They can play video content hosted on Facebook but they are unable to leave reactions on videos or other types of posts.
Which part of the policy configuration must you change to resolve the issue?

• A.The SSL inspection needs to be a deep content inspection.
• B.Add Facebook in the URL category in the security policy.
• C.Force access to Facebook using the HTTP service.
• D.Additional application signatures are required to add to the security policy.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Based on the administrator profile settings, what permissions must the administrator set to run the diagnose firewall auth list CLI command on FortiGate?

• A.Custom permission for Network
• B.Read/Write permission for Log & Report
• C.CLI diagnostics commands permission
• D.Read/Write permission for Firewall

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements about backing up logs from the CLI and downloading logs from the GUI are true? (Choose two.)

• A.Log downloads from the GUI are stored as LZ4 compressed files.
• B.Log backups from the CLI can be configured to upload to FTP as a scheduled time
• C.Log downloads from the GUI are limited to the current filter view
• D.Log backups from the CLI cannot be restored to another FortiGate.

Comment: *

Name: *

Email: *

Verification: *