Which two statements about IPsec authentication on FortiGate are correct? (Choose two.)

• A.A certificate is not required on the remote peer when you set the signature as the authentication method.
• B.Enabling XAuth results in a faster authentication because fewer packets are exchanged.
• C.FortiGate supports pre-shared key and signature as authentication methods.
• D.For a stronger authentication, you can also enable extended authentication (XAuth) to request the remote peer to provide a username and password

Comment: *

Name: *

Email: *

Verification: *

By default, FortiGate is configured to use HTTPS when performing live web filtering with FortiGuard servers.
Which CLI command will cause FortiGate to use an unreliable protocol to communicate with FortiGuard servers for live web filtering?

• A.set fortiguard-anycast disable
• B.set webfilter-force-off disable
• C.set webfilter-cache disable
• D.set protocol tcp

Comment: *

Name: *

Email: *

Verification: *

Which statement about the policy ID number of a firewall policy is true?

• A.It represents the number of objects used in the firewall policy.
• B.It changes when firewall policies are reordered.
• C.It defines the order in which rules are processed.
• D.It is required to modify a firewall policy using the CLI.

Comment: *

Name: *

Email: *

Verification: *

Which three authentication timeout types are availability for selection on FortiGate? (Choose three.)

• A.hard-timeout
• B.auth-on-demand
• C.soft-timeout
• D.new-session
• E.Idle-timeout

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

The Root and To_Internet VDOMs are configured in NAT mode. The DMZ and Local VDOMs are configured in transparent mode.
The Root VDOM is the management VDOM. The To_Internet VDOM allows LAN users to access the internet. The To_Internet VDOM is the only VDOM with internet access and is directly connected to ISP modem.
With this configuration, which statement is true?

• A.Inter-VDOM links are not required between the Root and To_Internet VDOMs because the Root VDOM is used only as a management VDOM.
• B.A static route is required on the To_Internet VDOM to allow LAN users to access the internet.
• C.Inter-VDOM links are required to allow traffic between the Local and Root VDOMs.
• D.Inter-VDOM links are required to allow traffic between the Local and DMZ VDOMs.

Comment: *

Name: *

Email: *

Verification: *