Which of the following SD-WAN load -balancing method use interface weight value to distribute traffic? (Choose two.)

• A.Source IP
• B.Spillover
• C.Volume
• D.Session

Comment: *

Name: *

Email: *

Verification: *

Which three authentication timeout types are availability for selection on FortiGate? (Choose three.)

• A.hard-timeout
• B.auth-on-demand
• C.soft-timeout
• D.new-session
• E.Idle-timeout

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

The Root and To_Internet VDOMs are configured in NAT mode. The DMZ and Local VDOMs are configured in transparent mode.
The Root VDOM is the management VDOM. The To_Internet VDOM allows LAN users to access the internet. The To_Internet VDOM is the only VDOM with internet access and is directly connected to ISP modem.
With this configuration, which statement is true?

• A.Inter-VDOM links are required to allow traffic between the Local and Root VDOMs.
• B.A static route is required on the To_Internet VDOM to allow LAN users to access the internet.
• C.Inter-VDOM links are not required between the Root and To_Internet VDOMs because the Root VDOM is used only as a management VDOM.
• D.Inter-VDOM links are required to allow traffic between the Local and DMZ VDOMs.

Comment: *

Name: *

Email: *

Verification: *

Which two statements about IPsec authentication on FortiGate are correct? (Choose two.)

• A.For a stronger authentication, you can also enable extended authentication (XAuth) to request the remote peer to provide a username and password
• B.FortiGate supports pre-shared key and signature as authentication methods.
• C.Enabling XAuth results in a faster authentication because fewer packets are exchanged.
• D.A certificate is not required on the remote peer when you set the signature as the authentication method.

Comment: *

Name: *

Email: *

Verification: *

If Internet Service is already selected as Source in a firewall policy, which other configuration objects can be added to the Source filed of a firewall policy?

• A.IP address
• B.FQDN address
• C.Once Internet Service is selected, no other object can be added
• D.User or User Group

Comment: *

Name: *

Email: *

Verification: *