Examine this output from a debug flow:

Why did the FortiGate drop the packet?

• A.The next-hop IP address is unreachable.
• B.It failed the RPF check.
• C.It matched an explicitly configured firewall policy with the action DENY.
• D.It matched the default implicit firewall policy.

Comment: *

Name: *

Email: *

Verification: *

Which two statements about IPsec authentication on FortiGate are correct? (Choose two.)

• A.For a stronger authentication, you can also enable extended authentication (XAuth) to request the remote peer to provide a username and password
• B.FortiGate supports pre-shared key and signature as authentication methods.
• C.Enabling XAuth results in a faster authentication because fewer packets are exchanged.
• D.A certificate is not required on the remote peer when you set the signature as the authentication method.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibits.


Exhibit A shows system performance output. Exhibit B shows a FortiGate configured with the default configuration of high memory usage thresholds. Based on the system performance output, which two statements are correct? (Choose two.)

• A.FortiGate has entered conserve mode.
• B.FortiGate will start sending all files to FortiSandbox for inspection.
• C.Administrators can access FortiGate only through the console port.
• D.Administrators cannot change the configuration.

Comment: *

Name: *

Email: *

Verification: *

Examine the IPS sensor and DoS policy configuration shown in the exhibit, then answer the question below.

When detecting attacks, which anomaly, signature, or filter will FortiGate evaluate first?

• A.ip_src_session
• B.Location: server Protocol: SMTP
• C.SMTP.Login.Brute.Force
• D.IMAP.Login.brute.Force

Comment: *

Name: *

Email: *

Verification: *

Which of the following SD-WAN load -balancing method use interface weight value to distribute traffic? (Choose two.)

• A.Source IP
• B.Spillover
• C.Volume
• D.Session

Comment: *

Name: *

Email: *

Verification: *