Consider the topology:
Application on a Windows machine <--{SSL VPN} -->FGT--> Telnet to Linux server.
An administrator is investigating a problem where an application establishes a Telnet session to a Linux server over the SSL VPN through FortiGate and the idle session times out after about 90 minutes. The administrator would like to increase or disable this timeout.
The administrator has already verified that the issue is not caused by the application or Linux server. This issue does not happen when the application establishes a Telnet connection to the Linux server directly on the LAN.
What two changes can the administrator make to resolve the issue without affecting services running through FortiGate? (Choose two.)

• A.Set the maximum session TTL value for the TELNET service object.
• B.Create a new service object for TELNET and set the maximum session TTL.
• C.Create a new firewall policy and place it above the existing SSLVPN policy for the SSL VPN traffic, and set the new TELNET service object in the policy.
• D.Set the session TTL on the SSLVPN policy to maximum, so the idle session timeout will not happen after 90 minutes.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

The Root and To_Internet VDOMs are configured in NAT mode. The DMZ and Local VDOMs are configured in transparent mode.
The Root VDOM is the management VDOM. The To_Internet VDOM allows LAN users to access the internet. The To_Internet VDOM is the only VDOM with internet access and is directly connected to ISP modem .
With this configuration, which statement is true?

• A.Inter-VDOM links are not required between the Root and To_Internet VDOMs because the Root VDOM is used only as a management VDOM.
• B.Inter-VDOM links are required to allow traffic between the Local and DMZ VDOMs.
• C.A static route is required on the To_Internet VDOM to allow LAN users to access the internet.
• D.Inter-VDOM links are required to allow traffic between the Local and Root VDOMs.

Comment: *

Name: *

Email: *

Verification: *

Which two statements are correct about SLA targets? (Choose two.)

• A.SLA targets are optional.
• B.SLA targets are used only when referenced by an SD-WAN rule.
• C.SLA targets are required for SD-WAN rules with a Best Quality strategy.
• D.You can configure only two SLA targets per one Performance SLA.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibits.


The SSL VPN connection fails when a user attempts to connect to it. What should the user do to successfully connect to SSL VPN?

• A.Change the Server IP address.
• B.Change the SSL VPN portal to the tunnel.
• C.Change the SSL VPN port on the client.
• D.Change the idle-timeout.

Comment: *

Name: *

Email: *

Verification: *

Refer to the web filter raw logs.

Based on the raw logs shown in the exhibit, which statement is correct?

• A.Social networking web filter category is configured with the action set to authenticate.
• B.The name of the firewall policy is all_users_web.
• C.Access to the social networking web filter category was explicitly blocked to all users.
• D.The action on firewall policy ID 1 is set to warning.

Comment: *

Name: *

Email: *

Verification: *