What is the primary FortiGate election process when the HA override setting is disabled?

• A.Connected monitored ports > System uptime > Priority > FortiGate Serial number
• B.Connected monitored ports > HA uptime > Priority > FortiGate Serial number
• C.Connected monitored ports > Priority > HA uptime > FortiGate Serial number
• D.Connected monitored ports > Priority > System uptime > FortiGate Serial number

Comment: *

Name: *

Email: *

Verification: *

If Internet Service is already selected as Source in a firewall policy, which other configuration objects can be added to the Source filed of a firewall policy?

• A.IP address
• B.Once Internet Service is selected, no other object can be added
• C.User or User Group
• D.FQDN address

Comment: *

Name: *

Email: *

Verification: *

Which two statements about antivirus scanning mode are true? (Choose two.)

• A.In proxy-based inspection mode, files bigger than the buffer size are scanned.
• B.In flow-based inspection mode, FortiGate buffers the file, but also simultaneously transmits it to the client.
• C.In proxy-based inspection mode, antivirus scanning buffers the whole file for scanning, before sending it to the client.
• D.In flow-based inspection mode, files bigger than the buffer size are scanned.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

The exhibit shows a CLI output of firewall policies, proxy policies, and proxy addresses.
How does FortiGate process the traffic sent to http://www.fortinet.com?

• A.Traffic will be redirected to the transparent proxy and It will be allowed by proxy policy ID 1.
• B.Traffic will be redirected to the transparent proxy and it will be denied by the proxy implicit deny policy.
• C.Traffic will not be redirected to the transparent proxy and it will be allowed by firewall policy ID 1.
• D.Traffic will be redirected to the transparent proxy and it will be allowed by proxy policy ID 3.

Comment: *

Name: *

Email: *

Verification: *

A network administrator has enabled SSL certificate inspection and antivirus on FortiGate. When downloading an EICAR test file through HTTP, FortiGate detects the virus and blocks the file. When downloading the same file through HTTPS, FortiGate does not detect the virus and the file can be downloaded.
What is the reason for the failed virus detection by FortiGate?

• A.Application control is not enabled
• B.SSL/SSH Inspection profile is incorrect
• C.Antivirus profile configuration is incorrect
• D.Antivirus definitions are not up to date

Comment: *

Name: *

Email: *

Verification: *