Why does FortiGate keep TCP sessions in the session table for some seconds even after both sides (client and server) have terminated the session?

• A.To remove the NAT operation.
• B.To generate logs
• C.To allow for out-of-order packets that could arrive after the FIN/ACK packets.
• D.To finish any inspection operations.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

The exhibit shows a CLI output of firewall policies, proxy policies, and proxy addresses.
How does FortiGate process the traffic sent to http://www.fortinet.com?

• A.Traffic will be redirected to the transparent proxy and it will be allowed by proxy policy ID 3.
• B.Traffic will not be redirected to the transparent proxy and it will be allowed by firewall policy ID 1.
• C.Traffic will be redirected to the transparent proxy and it will be denied by the proxy implicit deny policy.
• D.Traffic will be redirected to the transparent proxy and It will be allowed by proxy policy ID 1.

Comment: *

Name: *

Email: *

Verification: *

A network administrator wants to set up redundant IPsec VPN tunnels on FortiGate by using two IPsec VPN tunnels and static routes.
* All traffic must be routed through the primary tunnel when both tunnels are up.
* The secondary tunnel must be used only if the primary tunnel goes down.
* In addition, FortiGate should be able to detect a dead tunnel to speed up tunnel failover.
Which two key configuration changes are needed on FortiGate to meet the design requirements? (Choose two.)

• A.Enable Auto-negotiate and Autokey Keep Alive on the phase 2 configuration of both tunnels.
• B.Configure a high distance on the static route for the primary tunnel, and a lower distance on the static route for the secondary tunnel.
• C.Enable Dead Peer Detection.
• D.Configure a lower distance on the static route for the primary tunnel, and a higher distance on the static route for the secondary tunnel.

Comment: *

Name: *

Email: *

Verification: *

Which three authentication timeout types are availability for selection on FortiGate? (Choose three.)

• A.hard-timeout
• B.auth-on-demand
• C.soft-timeout
• D.new-session
• E.Idle-timeout

Comment: *

Name: *

Email: *

Verification: *

What is the effect of enabling auto-negotiate on the phase 2 configuration of an IPsec tunnel?

• A.FortiGate automatically negotiates different encryption and authentication algorithms with the remote peer.
• B.FortiGate automatically brings up the IPsec tunnel and keeps it up, regardless of activity on the IPsec tunnel.
• C.FortiGate automatically negotiates different local and remote addresses with the remote peer.
• D.FortiGate automatically negotiates a new security association after the existing security association expires.

Comment: *

Name: *

Email: *

Verification: *