An administrator needs to configure VPN user access for multiple sites using the same soft FortiToken.
Each site has a FortiGate VPN gateway.
What must an administrator do to achieve this objective?

• A.The administrator can register the same FortiToken on more than one FortiGate.
• B.The administrator must use a FortiAuthenticator device.
• C.The administrator can use a third-party radius OTP server.
• D.The administrator must use the user self-registration server.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibits.


The SSL VPN connection fails when a user attempts to connect to it. What should the user do to successfully connect to SSL VPN?

• A.Change the Server IP address.
• B.Change the SSL VPN portal to the tunnel.
• C.Change the idle-timeout.
• D.Change the SSL VPN port on the client.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

The global settings on a FortiGate device must be changed to align with company security policies. What does the Administrator account need to access the FortiGate global settings?

• A.Change password
• B.Enable two-factor authentication
• C.Change Administrator profile
• D.Enable restrict access to trusted hosts

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Which contains a session list output. Based on the information shown in the exhibit, which statement is true?

• A.Overload NAT IP pool is used in the firewall policy.
• B.Port block allocation IP pool is used in the firewall policy.
• C.Destination NAT is disabled in the firewall policy.
• D.One-to-one NAT IP pool is used in the firewall policy.

Comment: *

Name: *

Email: *

Verification: *

View the exhibit.

Which of the following statements are correct? (Choose two.)

• A.Dead peer detection must be disabled to support this type of IPsec setup.
• B.The TunnelB route is the primary route for reaching the remote site. The TunnelA route is used only if the TunnelB VPN is down.
• C.This setup requires at least two firewall policies with the action set to IPsec.
• D.This is a redundant IPsec setup.

Comment: *

Name: *

Email: *

Verification: *