An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)

• A.The interface has been configured for one-arm sniffer.
• B.The interface is a member of a virtual wire pair.
• C.The operation mode is transparent.
• D.The interface is a member of a zone.
• E.Captive portal is enabled in the interface.

Comment: *

Name: *

Email: *

Verification: *

Which two settings can be separately configured per VDOM on a FortiGate device? (Choose two.)

• A.System time
• B.FortiGuaid update servers
• C.Operating mode
• D.NGFW mode

Comment: *

Name: *

Email: *

Verification: *

In which two ways can RPF checking be disabled? (Choose two )

• A.Disable the RPF check at the FortiGate interface level for the source check
• B.Enable anti-replay in firewall policy.
• C.Disable strict-arc-check under system settings.
• D.Enable asymmetric routing.

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements is true regarding SSL VPN settings for an SSL VPN portal?

• A.By default, split tunneling is enabled.
• B.By default, the SSL VPN portal requires the installation of a client's certificate.
• C.By default, FortiGate uses WINS servers to resolve names.
• D.By default, the admin GUI and SSL VPN portal use the same HTTPS port.

Comment: *

Name: *

Email: *

Verification: *

Which three criteria can a FortiGate use to look for a matching firewall policy to process traffic? (Choose three.)

• A.Lowest to highest policy ID number.
• B.Highest to lowest priority defined in the firewall policy.
• C.Source defined as Internet Services in the firewall policy.
• D.Destination defined as Internet Services in the firewall policy.
• E.Services defined in the firewall policy.

Comment: *

Name: *

Email: *

Verification: *