What is the effect of enabling auto-negotiate on the phase 2 configuration of an IPsec tunnel?

• A.FortiGate automatically negotiates different local and remote addresses with the remote peer.
• B.FortiGate automatically negotiates a new security association after the existing security association expires.
• C.FortiGate automatically negotiates different encryption and authentication algorithms with the remote peer.
• D.FortiGate automatically brings up the IPsec tunnel and keeps it up, regardless of activity on the IPsec tunnel.

Comment: *

Name: *

Email: *

Verification: *

Which statement about the policy ID number of a firewall policy is true?

• A.It represents the number of objects used in the firewall policy.
• B.It defines the order in which rules are processed.
• C.It is required to modify a firewall policy using the CLI.
• D.It changes when firewall policies are reordered.

Comment: *

Name: *

Email: *

Verification: *

A network administrator has enabled full SSL inspection and web filtering on FortiGate. When visiting any HTTPS websites, the browser reports certificate warning errors. When visiting HTTP websites, the browser does not report errors.
What is the reason for the certificate warning errors?

• A.There are network connectivity issues.
• B.The browser requires a software update.
• C.The CA certificate set on the SSL/SSH inspection profile has not been imported into the browser.
• D.FortiGate does not support full SSL inspection when web filtering is enabled.

Comment: *

Name: *

Email: *

Verification: *

To complete the final step of a Security Fabric configuration, an administrator must authorize all the devices on which device?

• A.Downstream FortiGate
• B.FortiAnalyzer
• C.Root FortiGate
• D.FortiManager

Comment: *

Name: *

Email: *

Verification: *

Which two statements are correct regarding FortiGate HA cluster virtual IP addresses? (Choose two.)

• A.A change in the virtual IP address happens when a FortiGate device joins or leaves the cluster.
• B.Virtual IP addresses are used to distinguish between cluster members.
• C.Heartbeat interfaces have virtual IP addresses that are manually assigned.
• D.The primary device in the cluster is always assigned IP address 169.254.0.1.

Comment: *

Name: *

Email: *

Verification: *