FortiGate is operating in NAT mode and is configured with two virtual LAN (VLAN) subinterfaces added to the same physical interface.
In this scenario, which statement about VLAN IDs is true?

• A.The two VLAN subinterfaces can have the same VLAN ID only if they have IP addresses in different subnets.
• B.The two VLAN subinterfaces must have different VLAN IDs.
• C.The two VLAN subinterfaces can have the same VLAN ID only if they have IP addresses in the same subnet.
• D.The two VLAN subinterfaces can have the same VLAN ID only if they belong to different VDOMs.

Comment: *

Name: *

Email: *

Verification: *

Refer to the FortiGuard connection debug output.

Based on the output shown in the exhibit, which two statements are correct? (Choose two.)

• A.There is at least one server that lost packets consecutively.
• B.One server was contacted to retrieve the contract information.
• C.A local FortiManager is one of the servers FortiGate communicates with.
• D.FortiGate is using default FortiGuard communication settings.

Comment: *

Name: *

Email: *

Verification: *

Which two attributes are required on a certificate so it can be used as a CA certificate on SSL Inspection?
(Choose two.)

• A.The keyUsage extension must be set to keyCertSign.
• B.The common name on the subject field must use a wildcard name.
• C.The issuer must be a public CA.
• D.The CA extension must be set to TRUE.

Comment: *

Name: *

Email: *

Verification: *

An organization's employee needs to connect to the office through a high-latency internet connection.
Which SSL VPN setting should the administrator adjust to prevent the SSL VPN negotiation failure?

• A.Change the udp idle timer.
• B.Change the session-ttl.
• C.Change the idle-timeout.
• D.Change the login timeout.

Comment: *

Name: *

Email: *

Verification: *

What are two benefits of flow-based inspection compared to proxy-based inspection? (Choose two.)

• A.FortiGate uses fewer resources.
• B.FortiGate performs a more exhaustive inspection on traffic.
• C.FortiGate adds less latency to traffic.
• D.FortiGate allocates two sessions per connection.

Comment: *

Name: *

Email: *

Verification: *