Which statements are true regarding firewall policy NAT using the outgoing interface IP address with fixed port disabled? (Choose two.)

• A.Port address translation is not used.
• B.This is known as many-to-one NAT.
• C.Source IP is translated to the outgoing interface IP.
• D.Connections are tracked using source port and source MAC address.

Comment: *

Name: *

Email: *

Verification: *

Refer to the web filter raw logs.

Based on the raw logs shown in the exhibit, which statement is correct?

• A.The action on firewall policy ID 1 is set to warning.
• B.Access to the social networking web filter category was explicitly blocked to all users.
• C.The name of the firewall policy is all_users_web.
• D.Social networking web filter category is configured with the action set to authenticate.

Comment: *

Name: *

Email: *

Verification: *

Which of the following are purposes of NAT traversal in IPsec? (Choose two.)

• A.To detect intermediary NAT devices in the tunnel path.
• B.To dynamically change phase 1 negotiation mode aggressive mode.
• C.To encapsulation ESP packets in UDP packets using port 4500.
• D.To force a new DH exchange with each phase 2 rekey.

Comment: *

Name: *

Email: *

Verification: *

Which three criteria can a FortiGate use to look for a matching firewall policy to process traffic? (Choose three.)

• A.Highest to lowest priority defined in the firewall policy.
• B.Destination defined as Internet Services in the firewall policy.
• C.Services defined in the firewall policy.
• D.Lowest to highest policy ID number.
• E.Source defined as Internet Services in the firewall policy.

Comment: *

Name: *

Email: *

Verification: *

Which downstream FortiGate VDOM is used to join the Security Fabric when split-task VDOM is enabled on all FortiGate devices?

• A.Customer VDOM
• B.FG-traffic VDOM
• C.Root VDOM
• D.Global VDOM

Comment: *

Name: *

Email: *

Verification: *