Refer to the exhibit.

The exhibit shows a CLI output of firewall policies, proxy policies, and proxy addresses.
How does FortiGate process the traffic sent to http://www.fortinet.com?

• A.Traffic will be redirected to the transparent proxy and It will be allowed by proxy policy ID 1.
• B.Traffic will be redirected to the transparent proxy and it will be denied by the proxy implicit deny policy.
• C.Traffic will not be redirected to the transparent proxy and it will be allowed by firewall policy ID 1.
• D.Traffic will be redirected to the transparent proxy and it will be allowed by proxy policy ID 3.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

The exhibit shows proxy policies and proxy addresses, the authentication rule and authentication scheme, users, and firewall address.
An explicit web proxy is configured for subnet range 10.0.1.0/24 with three explicit web proxy policies.
The authentication rule is configured to authenticate HTTP requests for subnet range 10.0.1.0/24 with a form-based authentication scheme for the FortiGate local user database. Users will be prompted for authentication.
How will FortiGate process the traffic when the HTTP request comes from a machine with the source IP 10.0.1.10 to the destination http://www.fortinet.com? (Choose two.)

• A.If a Mozilla Firefox browser is used with User-A credentials, the HTTP request will be allowed.
• B.If a Mozilla Firefox browser is used with User-B credentials, the HTTP request will be allowed.
• C.If a Google Chrome browser is used with User-B credentials, the HTTP request will be allowed.
• D.If a Microsoft Internet Explorer browser is used with User-B credentials, the HTTP request will be allowed.

Comment: *

Name: *

Email: *

Verification: *

Which two attributes are required on a certificate so it can be used as a CA certificate on SSL Inspection? (Choose two.)

• A.The issuer must be a public CA.
• B.The common name on the subject field must use a wildcard name.
• C.The keyUsage extension must be set to keyCertSign.
• D.The CA extension must be set to TRUE.

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements is true regarding SSL VPN settings for an SSL VPN portal?

• A.By default, split tunneling is enabled.
• B.By default, the SSL VPN portal requires the installation of a client's certificate.
• C.By default, the admin GUI and SSL VPN portal use the same HTTPS port.
• D.By default, FortiGate uses WINS servers to resolve names.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

The exhibits show a network diagram and the explicit web proxy configuration.
In the command diagnose sniffer packet, what filter can you use to capture the traffic between the client and the explicit web proxy?

• A.'host 192.168.0.2 and port 8080'
• B.'host 10.0.0.50 and port 80'
• C.'host 10.0.0.50 and port 8080'
• D.'host 192.168.0.1 and port 80'

Comment: *

Name: *

Email: *

Verification: *