Which three security features require the intrusion prevention system (IPS) engine to function? (Choose three.)

• A.Web filter in flow-based inspection
• B.Antivirus in flow-based inspection
• C.DNS filter
• D.Web application firewall
• E.Application control

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibits.
The exhibits show a network diagram and firewall configurations.
An administrator created a Deny policy with default settings to deny Webserver access for Remote-User2. Remote-User1 must be able to access the Webserver. Remote-User2 must not be able to access the Webserver.


In this scenario, which two changes can the administrator make to deny Webserver access for Remote-User2? (Choose two.)

• A.Disable match-vip in the Deny policy.
• B.Set the Destination address as Deny_IP in the Allow-access policy.
• C.Enable match vip in the Deny policy.
• D.Set the Destination address as Web_server in the Deny policy.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.




The exhibit contains a network diagram, central SNAT policy, and IP pool configuration.
The WAN (port1) interface has the IP address 10.200. 1. 1/24.
The LAN (port3) interface has the IP address 10.0. 1.254/24.
A firewall policy is configured to allow to destinations from LAN (port3) to WAN (port1).
Central NAT is enabled, so NAT settings from matching Central SNAT policies will be applied.
Which IP address will be used to source NAT the traffic, if the user on Local-Client (10.0. 1. 10) pings the IP address of Remote-FortiGate (10.200.3. 1)?

• A.10.200. 1.99
• B.10.200. 1. 149
• C.10.200. 1. 1
• D.10.200. 1.49

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.
The exhibit shows a diagram of a FortiGate device connected to the network and the firewall policy and IP pool configuration on the FortiGate device.

Which two actions does FortiGate take on internet traffic sourced from the subscribers? (Choose two.)

• A.FortiGate allocates port blocks per user, based on the configured range of internal IP addresses.
• B.FortiGate allocates port blocks on a first-come, first-served basis.
• C.FortiGate generates a system event log for every port block allocation made per user.
• D.FortiGate allocates 128 port blocks per user.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Review the Intrusion Prevention System (IPS) profile signature settings. Which statement is correct in adding the FTP.Login.Failed signature to the IPS sensor profile?

• A.The signature setting uses a custom rating threshold.
• B.The signature setting includes a group of other signatures.
• C.Traffic matching the signature will be allowed and logged.
• D.Traffic matching the signature will be silently dropped and logged.

Comment: *

Name: *

Email: *

Verification: *