Refer to the web filter raw logs.

Based on the raw logs shown in the exhibit, which statement is correct?

• A.Access to the social networking web filter category was explicitly blocked to all users.
• B.The name of the firewall policy is all_users_web.
• C.The action on firewall policy ID 1 is set to warning.
• D.Social networking web filter category is configured with the action set to authenticate.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit showing a debug flow output.

Which two statements about the debug flow output are correct? (Choose two.)

• A.A firewall policy allowed the connection.
• B.A new traffic session is created.
• C.The default route is required to receive a reply.
• D.The debug flow is of ICMP traffic.

Comment: *

Name: *

Email: *

Verification: *

An administrator does not want to report the logon events of service accounts to FortiGate. What setting on the collector agent is required to achieve this?

• A.Add user accounts to Active Directory (AD).
• B.Add user accounts to the FortiGate group fitter.
• C.Add the support of NTLM authentication.
• D.Add user accounts to the Ignore User List.

Comment: *

Name: *

Email: *

Verification: *

Which certificate value can FortiGate use to determine the relationship between the issuer and the certificate?

• A.Subject Alternative Name
• B.Subject Key Identifier value
• C.SMMIE Capabilities value
• D.Subject value

Comment: *

Name: *

Email: *

Verification: *

Examine the IPS sensor and DoS policy configuration shown in the exhibit, then answer the question below.

When detecting attacks, which anomaly, signature, or filter will FortiGate evaluate first?

• A.ip_src_session
• B.Location: server Protocol: SMTP
• C.IMAP.Login.brute.Force
• D.SMTP.Login.Brute.Force

Comment: *

Name: *

Email: *

Verification: *