Consider the topology:
Application on a Windows machine <--{SSL VPN} -->FGT--> Telnet to Linux server.
An administrator is investigating a problem where an application establishes a Telnet session to a Linux server over the SSL VPN through FortiGate and the idle session times out after about 90 minutes. The administrator would like to increase or disable this timeout.
The administrator has already verified that the issue is not caused by the application or Linux server. This issue does not happen when the application establishes a Telnet connection to the Linux server directly on the LAN.
What two changes can the administrator make to resolve the issue without affecting services running through FortiGate? (Choose two.)

• A.Set the session TTL on the SSLVPN policy to maximum, so the idle session timeout will not happen after 90 minutes.
• B.Create a new service object for TELNET and set the maximum session TTL.
• C.Set the maximum session TTL value for the TELNET service object.
• D.Create a new firewall policy and place it above the existing SSLVPN policy for the SSL VPN traffic, and set the new TELNET service object in the policy.

Comment: *

Name: *

Email: *

Verification: *

An administrator is configuring an Ipsec between site A and siteB. The Remotes Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192.16.1.0/24 and the remote quick mode selector is 192.16.2.0/24. How must the administrator configure the local quick mode selector for site B?

• A.192.168.3.0/24
• B.192.168.2.0/24
• C.192.168.0.0/8
• D.192.168.1.0/24

Comment: *

Name: *

Email: *

Verification: *

An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)

• A.The interface has been configured for one-arm sniffer.
• B.The interface is a member of a virtual wire pair.
• C.The operation mode is transparent.
• D.The interface is a member of a zone.
• E.Captive portal is enabled in the interface.

Comment: *

Name: *

Email: *

Verification: *

Which two statements about FortiGate FSSO agentless polling mode are true? (Choose two.)

• A.FortiGate does not support workstation check.
• B.FortiGate directs the collector agent to use a remote LDAP server.
• C.FortiGate uses the SMB protocol to read the event viewer logs from the DCs.
• D.FortiGate uses the AD server as the collector agent.

Comment: *

Name: *

Email: *

Verification: *

When browsing to an internal web server using a web-mode SSL VPN bookmark, which IP address is used as the source of the HTTP request?

• A.remote user's public IP address
• B.The public IP address of the FortiGate device.
• C.The remote user's virtual IP address.
• D.The internal IP address of the FortiGate device.

Comment: *

Name: *

Email: *

Verification: *