If the Services field is configured in a Virtual IP (VIP), which statement is true when central NAT is used?

• A.The Services field is used when you need to bundle several VIPs into VIP groups.
• B.The Services field removes the requirement to create multiple VIPs for different services.
• C.The Services field prevents multiple sources of traffic from using multiple services to connect to a single
• D.The Services field prevents SNAT and DNAT from being combined in the same policy.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Given the routing database shown in the exhibit, which two statements are correct? (Choose two.)

• A.The port3 default route has the lowest metric.
• B.The port1 and port2 default routes are active in the routing table.
• C.There will be eight routes active in the routing table.
• D.The port3 default route has the highest distance.

Comment: *

Name: *

Email: *

Verification: *

Why does FortiGate keep TCP sessions in the session table for some seconds even after both sides (client and server) have terminated the session?

• A.To generate logs
• B.To allow for out-of-order packets that could arrive after the FIN/ACK packets.
• C.To remove the NAT operation.
• D.To finish any inspection operations.

Comment: *

Name: *

Email: *

Verification: *

Which two inspection modes can you use to configure a firewall policy on a profile-based next-generation firewall (NGFW)? (Choose two.)

• A.Flow-based inspection
• B.Proxy-based inspection
• C.Full Content inspection
• D.Certificate inspection

Comment: *

Name: *

Email: *

Verification: *

An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)

• A.The interface has been configured for one-arm sniffer.
• B.The interface is a member of a virtual wire pair.
• C.The operation mode is transparent.
• D.The interface is a member of a zone.
• E.Captive portal is enabled in the interface.

Comment: *

Name: *

Email: *

Verification: *