An administrator has configured two-factor authentication to strengthen SSL VPN access. Which additional best practice can an administrator implement?

• A.Configure host check.
• B.Configure different SSL VPN realms.
• C.Configure Source IP Pools.
• D.Configure split tunneling in tunnel mode.

Comment: *

Name: *

Email: *

Verification: *

A network administrator is configuring a new IPsec VPN tunnel on FortiGate. The remote peer IP address is dynamic. In addition, the remote peer does not support a dynamic DNS update service.
What type of remote gateway should the administrator configure on FortiGate for the new IPsec VPN tunnel to work?

• A.Static IP Address
• B.Dialup User
• C.Dynamic DNS
• D.Pre-shared Key

Comment: *

Name: *

Email: *

Verification: *

Which two settings can be separately configured per VDOM on a FortiGate device? (Choose two.)

• A.System time
• B.FortiGuaid update servers
• C.Operating mode
• D.NGFW mode

Comment: *

Name: *

Email: *

Verification: *

When configuring a firewall virtual wire pair policy, which following statement is true?

• A.Any number of virtual wire pairs can be included in each policy, regardless of the policy traffic direction settings.
• B.Exactly two virtual wire pairs need to be included in each policy.
• C.Any number of virtual wire pairs can be included, as long as the policy traffic direction is the same.
• D.Only a single virtual wire pair can be included in each policy.

Comment: *

Name: *

Email: *

Verification: *

Which two statements are true about collector agent standard access mode? (Choose two.)

• A.Standard mode security profiles apply to user groups.
• B.Standard mode security profiles apply to organizational units (OU).
• C.Standard access mode supports nested groups.
• D.Standard mode uses Windows convention-NetBios: Domain\Username.

Comment: *

Name: *

Email: *

Verification: *