Refer to the exhibits.


An administrator creates a new address object on the root FortiGate (Local-FortiGate) in the security fabric. After synchronization, this object is not available on the downstream FortiGate (ISFW).
What must the administrator do to synchronize the address object?

• A.Change the csf setting on Local-FortiGate (root) to set fabric-object-unification default.
• B.Change the csf setting on both devices to set downstream-access enable.
• C.Change the csf setting on ISFW (downstream) to set configuration-sync local.
• D.Change the csf setting on ISFW (downstream) to set authorization-request-type certificate.

Comment: *

Name: *

Email: *

Verification: *

The HTTP inspection process in web filtering follows a specific order when multiple features are enabled in the web filter profile. What order must FortiGate use when the web filter profile has features enabled, such as safe search?

• A.DNS-based web filter and proxy-based web filter
• B.Static URL filter, FortiGuard category filter, and advanced filters
• C.Static domain filter, SSL inspection filter, and external connectors filters
• D.FortiGuard category filter and rating filter

Comment: *

Name: *

Email: *

Verification: *

Which scanning technique on FortiGate can be enabled only on the CLI?

• A.Heuristics scan
• B.Trojan scan
• C.Antivirus scan
• D.Ransomware scan

Comment: *

Name: *

Email: *

Verification: *

You have enabled logging on your FortiGate device for Event logs and all Security logs, and you have set up logging to use the FortiGate local disk . What is the default behavior when the local disk is full?

• A.Logs are overwritten and the only warning is issued when log disk usage reaches the threshold of 95%.
• B.Logs are overwritten and the first warning is issued when log disk usage reaches the threshold of 75%.
• C.No new log is recorded until you manually clear logs from the local disk .
• D.No new log is recorded after the warning is issued when log disk usage reaches the threshold of 95%.

Comment: *

Name: *

Email: *

Verification: *

Which of the following conditions must be met in order for a web browser to trust a web server certificate signed by a third-party CA?

• A.The CA certificate that signed the web-server certificate must be installed on the browser.
• B.The web-server certificate must be installed on the browser.
• C.The public key of the web server certificate must be installed on the browser.
• D.The private key of the CA certificate that signed the browser certificate must be installed on the browser.

Comment: *

Name: *

Email: *

Verification: *