Which two statements are correct about NGFW Policy-based mode? (Choose two.)

• A.NGFW policy-based mode does not require the use of central source NAT policy
• B.NGFW policy-based mode supports creating applications and web filtering categories directly in a firewall policy
• C.NGFW policy-based mode can only be applied globally and not on individual VDOMs
• D.NGFW policy-based mode policies support only flow inspection

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.



The exhibit contains a network interface configuration, firewall policies, and a CLI console configuration.
How will FortiGate handle user authentication for traffic that arrives on the LAN interface?

• A.Users from the Sales group will be prompted for authentication and can authenticate successfully with the correct credentials.
• B.Users from the HR group will be prompted for authentication and can authenticate successfully with the correct credentials.
• C.Authentication is enforced at a policy level; all users will be prompted for authentication.
• D.If there is a full-through policy in place, users will not be prompted for authentication.

Comment: *

Name: *

Email: *

Verification: *

View the exhibit:

Which the FortiGate handle web proxy traffic rue? (Choose two.)

• A.Broadcast traffic received in port1-VLAN10 will not be forwarded to port2-VLAN10.
• B.Traffic between port1-VLAN1 and port2-VLAN1 is allowed by default.
• C.port1-VLAN10 and port2-VLAN10 can be assigned to different VDOMs.
• D.port-VLAN1 is the native VLAN for the port1 physical interface.

Comment: *

Name: *

Email: *

Verification: *

By default, FortiGate is configured to use HTTPS when performing live web filtering with FortiGuard servers.
Which CLI command will cause FortiGate to use an unreliable protocol to communicate with FortiGuard servers for live web filtering?

• A.set fortiguard-anycast disable
• B.set webfilter-force-off disable
• C.set webfilter-cache disable
• D.set protocol tcp

Comment: *

Name: *

Email: *

Verification: *

If the Services field is configured in a Virtual IP (VIP), which statement is true when central NAT is used?

• A.The Services field prevents multiple sources of traffic from using multiple services to connect to a single
• B.The Services field is used when you need to bundle several VIPs into VIP groups.
• C.The Services field removes the requirement to create multiple VIPs for different services.
• D.The Services field prevents SNAT and DNAT from being combined in the same policy.

Comment: *

Name: *

Email: *

Verification: *