When browsing to an internal web server using a web-mode SSL VPN bookmark, which IP address is used as the source of the HTTP request?

• A.remote user's public IP address
• B.The public IP address of the FortiGate device.
• C.The remote user's virtual IP address.
• D.The internal IP address of the FortiGate device.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit showing a debug flow output.

Which two statements about the debug flow output are correct? (Choose two.)

• A.The debug flow is of ICMP traffic.
• B.A firewall policy allowed the connection.
• C.A new traffic session is created.
• D.The default route is required to receive a reply.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.


The exhibit contains the configuration for an SD-WAN Performance SLA, as well as the output of diagnose sys virtual-wan-link health-check.
Which interface will be selected as an outgoing interface?

• A.port2
• B.port4
• C.port3
• D.port1

Comment: *

Name: *

Email: *

Verification: *

An administrator wants to configure timeouts for users. Regardless of the useres behavior, the timer should start as soon as the user authenticates and expire after the configured value.
Which timeout option should be configured on FortiGate?

• A.auth-on-demand
• B.soft-timeout
• C.idle-timeout
• D.new-session
• E.hard-timeout

Comment: *

Name: *

Email: *

Verification: *

A network administrator is configuring a new IPsec VPN tunnel on FortiGate. The remote peer IP address is dynamic. In addition, the remote peer does not support a dynamic DNS update service.
What type of remote gateway should the administrator configure on FortiGate for the new IPsec VPN tunnel to work?

• A.Static IP Address
• B.Dialup User
• C.Dynamic DNS
• D.Pre-shared Key

Comment: *

Name: *

Email: *

Verification: *