A FortiGate is operating in NAT mode and configured with two virtual LAN (VLAN) sub interfaces added to the physical interface.
Which statements about the VLAN sub interfaces can have the same VLAN ID, only if they have IP addresses in different subnets.

• A.The two VLAN sub interfaces can have the same VLAN ID, only if they have IP addresses in different subnets.
• B.The two VLAN sub interfaces must have different VLAN IDs.
• C.The two VLAN sub interfaces can have the same VLAN ID, only if they belong to different VDOMs.
• D.The two VLAN sub interfaces can have the same VLAN ID, only if they have IP addresses in the same subnet.

Comment: *

Name: *

Email: *

Verification: *

Which of the following are purposes of NAT traversal in IPsec? (Choose two.)

• A.To detect intermediary NAT devices in the tunnel path.
• B.To dynamically change phase 1 negotiation mode aggressive mode.
• C.To encapsulation ESP packets in UDP packets using port 4500.
• D.To force a new DH exchange with each phase 2 rekey.

Comment: *

Name: *

Email: *

Verification: *

Which statement about video filtering on FortiGate is true?

• A.Video filtering FortiGuard categories are based on web filter FortiGuard categories.
• B.Full SSL Inspection is not required.
• C.It inspects video files hosted on file sharing services.
• D.It is available only on a proxy-based firewall policy.

Comment: *

Name: *

Email: *

Verification: *

Why does FortiGate Keep TCP sessions in the session table for several seconds, even after both sides (client and server) have terminated the session?

• A.To allow for out-of-order packets that could arrive after the FIN/ACK packets
• B.To finish any inspection operations
• C.To remove the NAT operation
• D.To generate logs

Comment: *

Name: *

Email: *

Verification: *

Which three methods are used by the collector agent for AD polling? (Choose three.)

• A.NetAPI
• B.WMI
• C.Novell API
• D.WinSecLog
• E.FortiGate polling

Comment: *

Name: *

Email: *

Verification: *