A team manager has decided that, while some members of the team need access to a particular website, the majority of the team does not Which configuration option is the most effective way to support this request?

• A.Implement a DNS filter for the specified website.
• B.Implement web filter quotas for the specified website
• C.Implement web filter authentication for the specified website.
• D.Implement a web filter category override for the specified website

Comment: *

Name: *

Email: *

Verification: *

Exhibit:

Refer to the exhibit to view the authentication rule configuration In this scenario, which statement is true?

• A.Session-based authentication is enabled.
• B.IP-based authentication is enabled
• C.Route-based authentication is enabled
• D.Policy-based authentication is enabled

Comment: *

Name: *

Email: *

Verification: *

Which of the following are purposes of NAT traversal in IPsec? (Choose two.)

• A.To detect intermediary NAT devices in the tunnel path.
• B.To dynamically change phase 1 negotiation mode aggressive mode.
• C.To encapsulation ESP packets in UDP packets using port 4500.
• D.To force a new DH exchange with each phase 2 rekey.

Comment: *

Name: *

Email: *

Verification: *

By default, FortiGate is configured to use HTTPS when performing live web filtering with FortiGuard servers.
Which CLI command will cause FortiGate to use an unreliable protocol to communicate with FortiGuard servers for live web filtering?

• A.set fortiguard-anycast disable
• B.set webfilter-force-off disable
• C.set webfilter-cache disable
• D.set protocol tcp

Comment: *

Name: *

Email: *

Verification: *

If Internet Service is already selected as Source in a firewall policy, which other configuration objects can be added to the Source filed of a firewall policy?

• A.User or User Group
• B.IP address
• C.Once Internet Service is selected, no other object can be added
• D.FQDN address

Comment: *

Name: *

Email: *

Verification: *