Which of the following SD-WAN load balancing method use interface weight value to distribute traffic? (Choose two.)

• A.Session
• B.Source IP
• C.Volume
• D.Spillover

Comment: *

Name: *

Email: *

Verification: *

An administrator wants to configure Dead Peer Detection (DPD) on IPSEC VPN for detecting dead tunnels.
The requirement is that FortiGate sends DPD probes only when no traffic is observed in the tunnel.
Which DPD mode on FortiGate will meet the above requirement?

• A.Disabled
• B.Enabled
• C.On Demand
• D.On Idle

Comment: *

Name: *

Email: *

Verification: *

Which two attributes are required on a certificate so it can be used as a CA certificate on SSL Inspection? (Choose two.)

• A.The CA extension must be set to TRUE.
• B.The common name on the subject field must use a wildcard name.
• C.The keyUsage extension must be set to keyCertSign.
• D.The issuer must be a public CA.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up. but phase 2 fails to come up.
Based on the phase 2 configuration shown in the exhibit, what configuration change will bring phase 2 up?

• A.On HQ-FortiGate, enable Auto-negotiate.
• B.On HQ-FortiGate, enable Diffie-Hellman Group 2.
• C.On Remote-FortiGate, set Seconds to 43200.
• D.On HQ-FortiGate, set Encryption to AES256.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Given the interfaces shown in the exhibit. which two statements are true? (Choose two.)

• A.port1-vlan10 and port2-vlan10 are part of the same broadcast domain.
• B.port1-vlan1 and port2-vlan1 can be assigned in the same VDOM or to different VDOMs
• C.port1 is a native VLAN.
• D.Traffic between port2 and port2-vlan1 is allowed by default.

Comment: *

Name: *

Email: *

Verification: *