Why does FortiGate keep TCP sessions in the session table for some seconds even after both sides (client and server) have terminated the session?

• A.To allow for out-of-order packets that could arrive after the FIN/ACK packets.
• B.To generate logs
• C.To remove the NAT operation.
• D.To finish any inspection operations.

Comment: *

Name: *

Email: *

Verification: *

Which three methods are used by the collector agent for AD polling? (Choose three.)

• A.FortiGate polling
• B.NetAPI
• C.Novell API
• D.WMI
• E.WinSecLog

Comment: *

Name: *

Email: *

Verification: *

An administrator wants to configure Dead Peer Detection (DPD) on IPSEC VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when no traffic is observed in the tunnel.
Which DPD mode on FortiGate will meet the above requirement?

• A.On Idle
• B.Enabled
• C.On Demand
• D.Disabled

Comment: *

Name: *

Email: *

Verification: *

Which two protocol options are available on the CLI but not on the GUI when configuring an SD-WAN Performance SLA? (Choose two.)

• A.udp-echo
• B.DNS
• C.TWAMP
• D.ping

Comment: *

Name: *

Email: *

Verification: *

If the Services field is configured in a Virtual IP (VIP), which statement is true when central NAT is used?

• A.The Services field prevents SNAT and DNAT from being combined in the same policy.
• B.The Services field is used when you need to bundle several VIPs into VIP groups.
• C.The Services field removes the requirement to create multiple VIPs for different services.
• D.The Services field prevents multiple sources of traffic from using multiple services to connect to a single

Comment: *

Name: *

Email: *

Verification: *