An administrator has configured a route-based IPsec VPN between two FortiGate devices. Which statement about this IPsec VPN configuration is true?

• A.A phase 2 configuration is not required.
• B.This VPN cannot be used as part of a hub-and-spoke topology.
• C.A virtual IPsec interface is automatically created after the phase 1 configuration is completed.
• D.The IPsec firewall policies must be placed at the top of the list.

Comment: *

Name: *

Email: *

Verification: *

You have enabled logging on your FortiGate device for Event logs and all Security logs, and you have set up logging to use the FortiGate local disk.
What is the default behavior when the local disk is full?

• A.No new log is recorded after the warning is issued when log disk usage reaches the threshold of 95%.
• B.Logs are overwritten and the only warning is issued when log disk usage reaches the threshold of 95%.
• C.No new log is recorded until you manually clear logs from the local disk.
• D.Logs are overwritten and the first warning is issued when log disk usage reaches the threshold of 75%.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.




The exhibit contains a network diagram, central SNAT policy, and IP pool configuration.
The WAN (port1) interface has the IP address 10.200.1.1/24.
The LAN (port3) interface has the IP address 10.0.1.254/24.
A firewall policy is configured to allow to destinations from LAN (port3) to WAN (port1).
Central NAT is enabled, so NAT settings from matching Central SNAT policies will be applied.
Which IP address will be used to source NAT the traffic, if the user on Local-Client (10.0.1.10) pings the IP address of Remote-FortiGate (10.200.3.1)?

• A.10.200.1.149
• B.10.200.1.1
• C.10.200.1.49
• D.10.200.1.99

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

The exhibit shows a CLI output of firewall policies, proxy policies, and proxy addresses.
How does FortiGate process the traffic sent to http://www.fortinet.com?

• A.Traffic will be redirected to the transparent proxy and It will be allowed by proxy policy ID 1.
• B.Traffic will be redirected to the transparent proxy and it will be denied by the proxy implicit deny policy.
• C.Traffic will not be redirected to the transparent proxy and it will be allowed by firewall policy ID 1.
• D.Traffic will be redirected to the transparent proxy and it will be allowed by proxy policy ID 3.

Comment: *

Name: *

Email: *

Verification: *

Which of the following SD-WAN load -balancing method use interface weight value to distribute traffic?
(Choose two.)

• A.Source IP
• B.Spillover
• C.Volume
• D.Session

Comment: *

Name: *

Email: *

Verification: *