Refer to the FortiGuard connection debug output.

Based on the output shown in the exhibit, which two statements are correct? (Choose two.)

• A.One server was contacted to retrieve the contract information.
• B.A local FortiManager is one of the servers FortiGate communicates with.
• C.There is at least one server that lost packets consecutively.
• D.FortiGate is using default FortiGuard communication settings.

Comment: *

Name: *

Email: *

Verification: *

Examine this PAC file configuration.

Which of the following statements are true? (Choose two.)

• A.Any web request to the 172.25.120.0/24 subnet is allowed to bypass the proxy.
• B.Browsers can be configured to retrieve this PAC file from the FortiGate.
• C.All requests not made to Fortinet.com or the 172.25.120.0/24 subnet, have to go through altproxy.corp.com: 8060.
• D.Any web request fortinet.com is allowed to bypass the proxy.

Comment: *

Name: *

Email: *

Verification: *

Consider the topology:
Application on a Windows machine <--{SSL VPN} -->FGT--> Telnet to Linux server.
An administrator is investigating a problem where an application establishes a Telnet session to a Linux server over the SSL VPN through FortiGate and the idle session times out after about 90 minutes. The administrator would like to increase or disable this timeout.
The administrator has already verified that the issue is not caused by the application or Linux server. This issue does not happen when the application establishes a Telnet connection to the Linux server directly on the LAN.
What two changes can the administrator make to resolve the issue without affecting services running through FortiGate? (Choose two.)

• A.Set the maximum session TTL value for the TELNET service object.
• B.Set the session TTL on the SSLVPN policy to maximum, so the idle session timeout will not happen after 90 minutes.
• C.Create a new firewall policy and place it above the existing SSLVPN policy for the SSL VPN traffic, and set the new TELNET service object in the policy.
• D.Create a new service object for TELNET and set the maximum session TTL.

Comment: *

Name: *

Email: *

Verification: *

An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)

• A.The interface is a member of a virtual wire pair.
• B.The operation mode is transparent.
• C.The interface has been configured for one-arm sniffer.
• D.The interface is a member of a zone.
• E.Captive portal is enabled in the interface.
  https://help.fortinet.com/fos50hlp/54/Content/FortiOS/fortigate-whats-new-54/Top_VirtualWirePair.htm

Comment: *

Name: *

Email: *

Verification: *

Examine this output from a debug flow:

Why did the FortiGate drop the packet?

• A.It failed the RPF check.
• B.The next-hop IP address is unreachable.
• C.It matched the default implicit firewall policy.
  https://kb.fortinet.com/kb/documentLink.do?externalID=13900
• D.It matched an explicitly configured firewall policy with the action DENY.

Comment: *

Name: *

Email: *

Verification: *