An administrator has a requirement to keep an application session from timing out on port 80. What two changes can the administrator make to resolve the issue without affecting any existing services running through FortiGate? (Choose two.)

• A.Create a new service object for HTTP service and set the session TTL to never
• B.Set the session TTL on the HTTP policy to maximum
• C.Create a new firewall policy with the new HTTP service and place it above the existing HTTP policy.
• D.Set the TTL value to never under config system-ttl

Comment: *

Name: *

Email: *

Verification: *

An administrator needs to increase network bandwidth and provide redundancy.
What interface type must the administrator select to bind multiple FortiGate interfaces?

• A.Software Switch interface
• B.VLAN interface
• C.Aggregate interface
• D.Redundant interface

Comment: *

Name: *

Email: *

Verification: *

You have enabled logging on your FortiGate device for Event logs and all Security logs, and you have set up logging to use the FortiGate local disk.
What is the default behavior when the local disk is full?

• A.No new log is recorded until you manually clear logs from the local disk.
• B.Logs are overwritten and the only warning is issued when log disk usage reaches the threshold of 95%.
• C.Logs are overwritten and the first warning is issued when log disk usage reaches the threshold of 75%.
• D.No new log is recorded after the warning is issued when log disk usage reaches the threshold of 95%.

Comment: *

Name: *

Email: *

Verification: *

Which two statements are correct about NGFW Policy-based mode? (Choose two.)

• A.NGFW policy-based mode supports creating applications and web filtering categories directly in a firewall policy
• B.NGFW policy-based mode can only be applied globally and not on individual VDOMs
• C.NGFW policy-based mode policies support only flow inspection
• D.NGFW policy-based mode does not require the use of central source NAT policy

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Given the security fabric topology shown in the exhibit, which two statements are true? (Choose two.)

• A.There are five devices that are part of the security fabric.
• B.Device detection is disabled on all FortiGate devices.
• C.This security fabric topology is a logical topology view.
• D.There are 19 security recommendations for the security fabric.

Comment: *

Name: *

Email: *

Verification: *