Which statement is correct regarding the inspection of some of the services available by web applications embedded in third-party websites?

• A.FortiGuard maintains only one signature of each web application that is unique.
• B.FortiGate can inspect sub-application traffic regardless where it was originated.
• C.The security actions applied on the web applications will also be explicitly applied on the third-party websites.
• D.The application signature database inspects traffic only from the original web application server.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit showing a debug flow output.

Which two statements about the debug flow output are correct? (Choose two.)

• A.The default route is required to receive a reply.
• B.A firewall policy allowed the connection.
• C.A new traffic session is created.
• D.The debug flow is of ICMP traffic.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

The exhibit shows proxy policies and proxy addresses, the authentication rule and authentication scheme, users, and firewall address.
An explicit web proxy is configured for subnet range 10.0.1.0/24 with three explicit web proxy policies.
The authentication rule is configured to authenticate HTTP requests for subnet range 10.0.1.0/24 with a form-based authentication scheme for the FortiGate local user database. Users will be prompted for authentication.
How will FortiGate process the traffic when the HTTP request comes from a machine with the source IP 10.0.1.10 to the destination http://www.fortinet.com? (Choose two.)

• A.If a Google Chrome browser is used with User-B credentials, the HTTP request will be allowed.
• B.If a Microsoft Internet Explorer browser is used with User-B credentials, the HTTP request will be allowed.
• C.If a Mozilla Firefox browser is used with User-B credentials, the HTTP request will be allowed.
• D.If a Mozilla Firefox browser is used with User-A credentials, the HTTP request will be allowed.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.




The exhibit contains a network diagram, central SNAT policy, and IP pool configuration.
The WAN (port1) interface has the IP address 10.200.1.1/24.
The LAN (port3) interface has the IP address 10.0.1.254/24.
A firewall policy is configured to allow to destinations from LAN (port3) to WAN (port1).
Central NAT is enabled, so NAT settings from matching Central SNAT policies will be applied.
Which IP address will be used to source NAT the traffic, if the user on Local-Client (10.0.1.10) pings the IP address of Remote-FortiGate (10.200.3.1)?

• A.10.200.1.49
• B.10.200.1.149
• C.10.200.1.99
• D.10.200.1.1

Comment: *

Name: *

Email: *

Verification: *

Examine this PAC file configuration.

Which of the following statements are true? (Choose two.)

• A.All requests not made to Fortinet.com or the 172.25.120.0/24 subnet, have to go through altproxy.corp.com: 8060.
• B.Any web request fortinet.com is allowed to bypass the proxy.
• C.Any web request to the 172.25.120.0/24 subnet is allowed to bypass the proxy.
• D.Browsers can be configured to retrieve this PAC file from the FortiGate.

Comment: *

Name: *

Email: *

Verification: *