An administrator has configured the following settings:

• A.Device detection on all interfaces is enforced for 30 minutes.
• B.Denied users are blocked for 30 minutes.
• C.A session for denied traffic is created.
• D.The number of logs generated by denied traffic is reduced.

Comment: *

Name: *

Email: *

Verification: *

If the Servicesfield is configured in a Virtual IP (VIP), which statement is true when central NAT is used?

• A.The Servicesfield prevents multiple sources of traffic from using multiple services to connect to a single computer.
• B.The Servicesfield is used when you need to bundle several VIPs into VIP groups.
• C.The Servicesfield prevents SNAT and DNAT from being combined in the same policy.
• D.The Servicesfield removes the requirement to create multiple VIPs for different services.

Comment: *

Name: *

Email: *

Verification: *

Which two types of traffic are managed only by the management VDOM? (Choose two.)

• A.PKI
• B.FortiGuard web filter queries
• C.Traffic shaping
• D.DNS

Comment: *

Name: *

Email: *

Verification: *

A network administrator is configuring a new IPsec VPN tunnel on FortiGate. The remote peer IP address is dynamic, in addition, the remote peer does not support a dynamic DNS update service. What type of remote gateway should tie administrator configure on FortiGate for the new IPsec VPN tunnel to work?

• A.Pre-shared Key
• B.Dynamic DNS
• C.Dialup User
• D.Static IP Address

Comment: *

Name: *

Email: *

Verification: *

Examine the exhibit, which contains a virtual IP and firewall policy configuration.



The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port2) interface has the IP address
10.0.1.254/24.
The first firewall policy has NAT enabled on the outgoing interface address. The second firewall policy is configured with a VIP as the destination address.
Which IP address will be used to source NAT the Internet traffic coming from a workstation with the IP address 10.0.1.10/24?

• A.10.200.1.10
• B.Any available IP address in the WAN (port1) subnet 10.200.1.0/24
• C.10.200.1.1
• D.10.0.1.254

Comment: *

Name: *

Email: *

Verification: *