View the exhibit. Which the FortiGate handle web proxy traffic rue? (Choose two.)

• A.Traffic between port1-VLAN1 and port2-VLAN1 is allowed by default.
• B.port1-VLAN10 and port2-VLAN10 can be assigned to different VDOMs.
• C.Broadcast traffic received in port1-VLAN10 will not be forwarded to port2-VLAN10.
• D.port-VLAN1 is the native VLAN for the port1 physical interface.

Comment: *

Name: *

Email: *

Verification: *

Which two protocol options are available on the CLI but not on the GUI when configuring an SD-WAN Performance SLA? (Choose two.)

• A.ping
• B.TWAMP
• C.udp-echo
• D.DNS

Comment: *

Name: *

Email: *

Verification: *

Which three statements are true regarding session-based authentication? (Choose three.)

• A.It is not recommended if multiple users are behind the source NAT
• B.IP sessions from the same source IP address are treated as a single user.
• C.HTTP sessions are treated as a single user.
• D.It requires more resources.
• E.It can differentiate among multiple clients behind the same source IP address.

Comment: *

Name: *

Email: *

Verification: *

A FortiGate is operating in NAT mode and configured with two virtual LAN (VLAN) sub interfaces added to the physical interface.
Which statements about the VLAN sub interfaces can have the same VLAN ID, only if they have IP addresses in different subnets.

• A.The two VLAN sub interfaces can have the same VLAN ID, only if they have IP addresses in different subnets.
• B.The two VLAN sub interfaces must have different VLAN IDs.
• C.The two VLAN sub interfaces can have the same VLAN ID, only if they belong to different VDOMs.
• D.The two VLAN sub interfaces can have the same VLAN ID, only if they have IP addresses in the same subnet.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Review the Intrusion Prevention System (IPS) profile signature settings. Which statement is correct in adding the FTP.Login.Failed signature to the IPS sensor profile?

• A.The signature setting includes a group of other signatures.
• B.The signature setting uses a custom rating threshold.
• C.Traffic matching the signature will be silently dropped and logged.
• D.Traffic matching the signature will be allowed and logged.

Comment: *

Name: *

Email: *

Verification: *