An administrator needs to configure VPN user access for multiple sites using the same soft FortiToken. Each site has a FortiGate VPN gateway.
What must an administrator do to achieve this objective?

• A.The administrator must use a FortiAuthenticator device.
• B.The administrator can register the same FortiToken on more than one FortiGate.
• C.The administrator can use a third-party radius OTP server.
• D.The administrator must use the user self-registration server.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Examine the intrusion prevention system (IPS) diagnostic command.
Which statement is correct If option 5 was used with the IPS diagnostic command and the outcome was a decrease in the CPU usage?

• A.The IPS engine was blocking all traffic.
• B.The IPS engine was unable to prevent an intrusion attack.
• C.The IPS engine was inspecting high volume of traffic.
• D.The IPS engine will continue to run in a normal state.

Comment: *

Name: *

Email: *

Verification: *

Examine the exhibit, which contains a virtual IP and firewall policy configuration.



The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port2) interface has the IP address 10.0.1.254/24.
The first firewall policy has NAT enabled on the outgoing interface address. The second firewall policy is configured with a VIP as the destination address.
Which IP address will be used to source NAT the Internet traffic coming from a workstation with the IP address 10.0.1.10/24?

• A.10.200.1.10
• B.Any available IP address in the WAN (port1) subnet 10.200.1.0/24
• C.10.200.1.1
• D.10.0.1.254

Comment: *

Name: *

Email: *

Verification: *

Which three options are the remote log storage options you can configure on FortiGate? (Choose three.)

• A.FortiAnalyzer
• B.FortiSIEM
• C.FortiCache
• D.FortiSandbox
• E.FortiCloud

Comment: *

Name: *

Email: *

Verification: *

A network administrator is configuring a new IPsec VPN tunnel on FortiGate. The remote peer IP address is dynamic. In addition, the remote peer does not support a dynamic DNS update service.
What type of remote gateway should the administrator configure on FortiGate for the new IPsec VPN tunnel to work?

• A.Static IP Address
• B.Dialup User
• C.Dynamic DNS
• D.Pre-shared Key

Comment: *

Name: *

Email: *

Verification: *