An administrator needs to configure VPN user access for multiple sites using the same soft FortiToken. Each site has a FortiGate VPN gateway.
What must an administrator do to achieve this objective?

• A.The administrator can register the same FortiToken on more than one FortiGate.
• B.The administrator can use a third-party radius OTP server.
• C.The administrator must use a FortiAuthenticator device.
• D.The administrator must use the user self-registration server.

Comment: *

Name: *

Email: *

Verification: *

An administrator has configured the following settings:

What are the two results of this configuration? (Choose two.)

• A.Device detection on all interfaces is enforced for 30 minutes.
• B.Denied users are blocked for 30 minutes.
• C.A session for denied traffic is created.
• D.The number of logs generated by denied traffic is reduced.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Which contains a session list output. Based on the information shown in the exhibit, which statement is true?

• A.Destination NAT is disabled in the firewall policy.
• B.One-to-one NAT IP pool is used in the firewall policy.
• C.Overload NAT IP pool is used in the firewall policy.
• D.Port block allocation IP pool is used in the firewall policy.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Based on the raw log, which two statements are correct? (Choose two.)

• A.Log severity is set to error on FortiGate.
• B.Traffic belongs to the root VDOM.
• C.Traffic is blocked because Action is set to DENY in the firewall policy.
• D.This is a security log.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibits.
Exhibit A.

Exhibit B.

An administrator creates a new address object on the root FortiGate (Local-FortiGate) in the security fabric. After synchronization, this object is not available on the downstream FortiGate (ISFW).
What must the administrator do to synchronize the address object?

• A.Change the csf setting on ISFW (downstream) to sec fabric-objecc-unificacion defaulc.
• B.Change the csf setting on ISFW (downstream) to sec configuracion-sync local.
• C.Change the csf setting on Local-FortiGate (root) to sec configuration-sync local.
• D.Change the csf setting on Local-FortiGate (root) to sec fabric-objecc-unificacion defaulc.

Comment: *

Name: *

Email: *

Verification: *