In which two ways can RPF checking be disabled? (Choose two )

• A.Disable the RPF check at the FortiGate interface level for the source check
• B.Disable strict-arc-check under system settings.
• C.Enable asymmetric routing.
• D.Enable anti-replay in firewall policy.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibits.


The exhibits show the SSL and authentication policy (Exhibit A) and the security policy (Exhibit B) tor Facebook.
Users are given access to the Facebook web application. They can play video content hosted on Facebook but they are unable to leave reactions on videos or other types of posts.
Which part of the policy configuration must you change to resolve the issue?

• A.The SSL inspection needs to be a deep content inspection.
• B.Force access to Facebook using the HTTP service.
• C.Additional application signatures are required to add to the security policy.
• D.Add Facebook in the URL category in the security policy.

Comment: *

Name: *

Email: *

Verification: *

Which two statements are true about collector agent advanced mode? (Choose two.)

• A.Security profiles can be applied only to user groups, not individual users.
• B.Advanced mode uses Windows convention-NetBios: Domain\Username.
• C.FortiGate can be configured as an LDAP client and group filters can be configured on FortiGate
• D.Advanced mode supports nested or inherited groups

Comment: *

Name: *

Email: *

Verification: *