If the Issuer and Subject values are the same in a digital certificate, which type of entity was the certificate issued to?

• A.A person
• B.A root CA
• C.A subordinate CA
• D.A CRL

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements about central NAT are true? (Choose two.)

• A.Source NAT, using central NAT, requires at least one central SNAT policy.
• B.Destination NAT, using central NAT, requires a VIP object as the destination address in a firewall.
• C.Central NAT can be enabled or disabled from the CLI only.
• D.IP tool references must be removed from existing firewall policies before enabling central NAT.

Comment: *

Name: *

Email: *

Verification: *

An administrator has configured a strict RPF check on FortiGate. Which statement is true about the strict RPF check?

• A.Strict RPF checks the best route back to the source using the incoming interface.
• B.The strict RPF check is run on the first sent and reply packet of any new session.
• C.Strict RPF allows packets back to sources with all active routes.
• D.Strict RPF checks only for the existence of at cast one active route back to the source using the incoming interface.

Comment: *

Name: *

Email: *

Verification: *

Which three authentication timeout types are availability for selection on FortiGate? (Choose three.)

• A.hard-timeout
• B.auth-on-demand
• C.soft-timeout
• D.new-session
• E.Idle-timeout

Comment: *

Name: *

Email: *

Verification: *

Which three options are the remote log storage options you can configure on FortiGate? (Choose three.)

• A.FortiAnalyzer
• B.FortiSIEM
• C.FortiSandbox
• D.FortiCache
• E.FortiCloud

Comment: *

Name: *

Email: *

Verification: *