Which two policies must be configured to allow traffic on a policy-based next-generation firewall (NGFW) FortiGate? (Choose two.)

• A.Security policy
• B.Firewall policy
• C.SSL inspection and authentication policy
• D.Policy rule

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

An administrator is running a sniffer command as shown in the exhibit.
Which three pieces of information are included in the sniffer output? (Choose three.)

• A.IP header
• B.Packet payload
• C.Ethernet header
• D.Interface name
• E.Application header

Comment: *

Name: *

Email: *

Verification: *

FortiGuard categories can be overridden and defined in different categories. To create a web rating override for example.com home page, the override must be configured using a specific syntax.
Which two syntaxes are correct to configure web rating for the home page? (Choose two.)

• A.www.example.com:443
• B.www.example.com
• C.example.com
• D.www.example.com/index.html

Comment: *

Name: *

Email: *

Verification: *

Consider the topology:
Application on a Windows machine <--{SSL VPN} -->FGT--> Telnet to Linux server.
An administrator is investigating a problem where an application establishes a Telnet session to a Linux server over the SSL VPN through FortiGate and the idle session times out after about 90 minutes. The administrator would like to increase or disable this timeout.
The administrator has already verified that the issue is not caused by the application or Linux server. This issue does not happen when the application establishes a Telnet connection to the Linux server directly on the LAN.
What two changes can the administrator make to resolve the issue without affecting services running through FortiGate? (Choose two.)

• A.Set the session TTL on the SSLVPN policy to maximum, so the idle session timeout will not happen after 90 minutes.
• B.Create a new firewall policy and place it above the existing SSLVPN policy for the SSL VPN traffic, and set the new TELNET service object in the policy.
• C.Set the maximum session TTL value for the TELNET service object.
• D.Create a new service object for TELNET and set the maximum session TTL.

Comment: *

Name: *

Email: *

Verification: *

View the exhibit.

Which of the following statements are correct? (Choose two.)

• A.This setup requires at least two firewall policies with the action set to IPsec.
• B.This is a redundant IPsec setup.
• C.Dead peer detection must be disabled to support this type of IPsec setup.
• D.The TunnelB route is the primary route for reaching the remote site. The TunnelA route is used only if the TunnelB VPN is down.

Comment: *

Name: *

Email: *

Verification: *