Which statements are true regarding firewall policy NAT using the outgoing interface IP address with fixed port disabled? (Choose two.)

• A.Port address translation is not used.
• B.Source IP is translated to the outgoing interface IP.
• C.Connections are tracked using source port and source MAC address.
• D.This is known as many-to-one NAT.

Comment: *

Name: *

Email: *

Verification: *

If the Services field is configured in a Virtual IP (VIP), which statement is true when central NAT is used?

• A.The Services field prevents SNAT and DNAT from being combined in the same policy.
• B.The Services field is used when you need to bundle several VIPs into VIP groups.
• C.The Services field removes the requirement to create multiple VIPs for different services.
• D.The Services field prevents multiple sources of traffic from using multiple services to connect to a single

Comment: *

Name: *

Email: *

Verification: *

FortiGuard categories can be overridden and defined in different categories. To create a web rating override for example.com home page, the override must be configured using a specific syntax.
Which two syntaxes are correct to configure web rating for the home page? (Choose two.)

• A.www.example.com:443
• B.www.example.com
• C.example.com
• D.www.example.com/index.html

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibits.


The exhibits show the SSL and authentication policy (Exhibit A) and the security policy (Exhibit B) tor Facebook.
Users are given access to the Facebook web application. They can play video content hosted on Facebook but they are unable to leave reactions on videos or other types of posts.
Which part of the policy configuration must you change to resolve the issue?

• A.The SSL inspection needs to be a deep content inspection.
• B.Force access to Facebook using the HTTP service.
• C.Additional application signatures are required to add to the security policy.
• D.Add Facebook in the URL category in the security policy.

Comment: *

Name: *

Email: *

Verification: *

Which type of logs on FortiGate record information about traffic directly to and from the FortiGate management IP addresses?

• A.System event logs
• B.Forward traffic logs
• C.Local traffic logs
• D.Security logs

Comment: *

Name: *

Email: *

Verification: *