Which of the following are purposes of NAT traversal in IPsec? (Choose two.)

• A.To detect intermediary NAT devices in the tunnel path.
• B.To dynamically change phase 1 negotiation mode aggressive mode.
• C.To encapsulation ESP packets in UDP packets using port 4500.
• D.To force a new DH exchange with each phase 2 rekey.

Comment: *

Name: *

Email: *

Verification: *

Which three statements are true regarding session-based authentication? (Choose three.)

• A.HTTP sessions are treated as a single user.
• B.IP sessions from the same source IP address are treated as a single user.
• C.It can differentiate among multiple clients behind the same source IP address.
• D.It requires more resources.
• E.It is not recommended if multiple users are behind the source NAT

Comment: *

Name: *

Email: *

Verification: *

Which two VDOMs are the default VDOMs created when FortiGate is set up in split VDOM mode? (Choose two.)

• A.FG-traffic
• B.Mgmt
• C.FG-Mgmt
• D.Root

Comment: *

Name: *

Email: *

Verification: *

Which two statements are true about collector agent advanced mode? (Choose two.)

• A.Security profiles can be applied only to user groups, not individual users.
• B.Advanced mode uses Windows convention-NetBios: Domain\Username.
• C.FortiGate can be configured as an LDAP client and group filters can be configured on FortiGate
• D.Advanced mode supports nested or inherited groups

Comment: *

Name: *

Email: *

Verification: *

Which two statements are true about collector agent standard access mode? (Choose two.)

• A.Standard mode security profiles apply to organizational units (OU).
• B.Standard mode security profiles apply to user groups.
• C.Standard mode uses Windows convention-NetBios: Domain\Username.
• D.Standard access mode supports nested groups.

Comment: *

Name: *

Email: *

Verification: *