An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)

• A.The interface has been configured for one-arm sniffer.
• B.The interface is a member of a virtual wire pair.
• C.The operation mode is transparent.
• D.The interface is a member of a zone.
• E.Captive portal is enabled in the interface.

Comment: *

Name: *

Email: *

Verification: *

Which scanning technique on FortiGate can be enabled only on the CLI?

• A.Trojan scan
• B.Heuristics scan
• C.Antivirus scan
• D.Ransomware scan

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibits.


The exhibits show the SSL and authentication policy (Exhibit A) and the security policy (Exhibit B) for Facebook .
Users are given access to the Facebook web application. They can play video content hosted on Facebook but they are unable to leave reactions on videos or other types of posts.
Which part of the policy configuration must you change to resolve the issue?

• A.Make SSL inspection needs to be a deep content inspection.
• B.Force access to Facebook using the HTTP service.
• C.Get the additional application signatures are required to add to the security policy.
• D.Add Facebook in the URL category in the security policy.

Comment: *

Name: *

Email: *

Verification: *

By default, FortiGate is configured to use HTTPS when performing live web filtering with FortiGuard servers.
Which CLI command will cause FortiGate to use an unreliable protocol to communicate with FortiGuard servers for live web filtering?

• A.set fortiguard-anycast disable
• B.set webfilter-force-off disable
• C.set webfilter-cache disable
• D.set protocol tcp

Comment: *

Name: *

Email: *

Verification: *

View the exhibit.

Which of the following statements are correct? (Choose two.)

• A.This setup requires at least two firewall policies with the action set to IPsec.
• B.Dead peer detection must be disabled to support this type of IPsec setup.
• C.The TunnelB route is the primary route for reaching the remote site. The TunnelA route is used only if the TunnelB VPN is down.
• D.This is a redundant IPsec setup.

Comment: *

Name: *

Email: *

Verification: *