An administrator is configuring an IPsec VPN between site A and site B.
The Remote Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192. 168. 1.0/24 and the remote quick mode selector is 192. 168.2.0/24.
Which subnet must the administrator configure for the local quick mode selector for site B?

• A.192. 168.2.0/24
• B.192. 168.0.0/24
• C.192. 168.3.0/24
• D.192. 168. 1.0/24

Comment: *

Name: *

Email: *

Verification: *

A FortiGate is operating in NAT mode and configured with two virtual LAN (VLAN) sub interfaces added to the physical interface. Which statements about the VLAN sub interfaces can have the same VLAN ID, only if they have IP addresses in different subnets.

• A.The two VLAN sub interfaces can have the same VLAN ID, only if they have IP addresses in different subnets.
• B.The two VLAN sub interfaces must have different VLAN IDs.
• C.The two VLAN sub interfaces can have the same VLAN ID, only if they belong to different VDOMs.
• D.The two VLAN sub interfaces can have the same VLAN ID, only if they have IP addresses in the same subnet.

Comment: *

Name: *

Email: *

Verification: *

Which two statements ate true about the Security Fabric rating? (Choose two.)

• A.The Security Fabric rating is a free service that comes bundled with alt FortiGate devices.
• B.It provides executive summaries of the four largest areas of security focus.
• C.Many of the security issues can be fixed immediately by clicking Apply where available.
• D.The Security Fabric rating must be run on the root FortiGate device in the Security Fabric.

Comment: *

Name: *

Email: *

Verification: *

An administrator must disable RPF check to investigate an issue.
Which method is best suited to disable RPF without affecting features like antivirus and intrusion prevention system?

• A.Disable the RPF check at the FortiGate interface level for the source check.
• B.Enable asymmetric routing at the interface level.
• C.Disable the RPF check at the FortiGate interface level for the reply check .
• D.Enable asymmetric routing, so the RPF check will be bypassed.

Comment: *

Name: *

Email: *

Verification: *

An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)

• A.The interface has been configured for one-arm sniffer.
• B.The interface is a member of a virtual wire pair.
• C.The operation mode is transparent.
• D.The interface is a member of a zone.
• E.Captive portal is enabled in the interface.

Comment: *

Name: *

Email: *

Verification: *