Refer to the exhibit to view the firewall policy.

Which statement is correct if well-known viruses are not being blocked?

• A.The firewall policy does not apply deep content inspection.
• B.The firewall policy must be configured in proxy-based inspection mode.
• C.The action on the firewall policy must be set to deny.
• D.Web filter should be enabled on the firewall policy to complement the antivirus profile.

Comment: *

Name: *

Email: *

Verification: *

Consider the topology:
Application on a Windows machine <--{SSL VPN} -->FGT--> Telnet to Linux server.
An administrator is investigating a problem where an application establishes a Telnet session to a Linux server over the SSL VPN through FortiGate and the idle session times out after about 90 minutes. The administrator would like to increase or disable this timeout.
The administrator has already verified that the issue is not caused by the application or Linux server. This issue does not happen when the application establishes a Telnet connection to the Linux server directly on the LAN.
What two changes can the administrator make to resolve the issue without affecting services running through FortiGate? (Choose two.)

• A.Set the session TTL on the SSLVPN policy to maximum, so the idle session timeout will not happen after 90 minutes.
• B.Create a new firewall policy and place it above the existing SSLVPN policy for the SSL VPN traffic, and set the new TELNET service object in the policy.
• C.Create a new service object for TELNET and set the maximum session TTL.
• D.Set the maximum session TTL value for the TELNET service object.

Comment: *

Name: *

Email: *

Verification: *

Which of the following are purposes of NAT traversal in IPsec? (Choose two.)

• A.To encapsulation ESP packets in UDP packets using port 4500.
• B.To dynamically change phase 1 negotiation mode aggressive mode.
• C.To force a new DH exchange with each phase 2 rekey.
• D.To detect intermediary NAT devices in the tunnel path.

Comment: *

Name: *

Email: *

Verification: *

An administrator does not want to report the logon events of service accounts to FortiGate. What setting on the collector agent is required to achieve this?

• A.Add the support of NTLM authentication.
• B.Add user accounts to Active Directory (AD).
• C.Add user accounts to the FortiGate group fitter.
• D.Add user accounts to the Ignore User List.

Comment: *

Name: *

Email: *

Verification: *

Which two statements are true about the FGCP protocol? (Choose two.)

• A.Is used to discover FortiGate devices in different HA groups
• B.Runs only over the heartbeat links
• C.Elects the primary FortiGate device
• D.Not used when FortiGate is in Transparent mode

Comment: *

Name: *

Email: *

Verification: *