Refer to the exhibit.

The exhibit displays the output of the CLI command: diagnose sys ha dump-by vcluster.
Which two statements are true? (Choose two.)

• A.FortiGate SN FGVM010000065036 HA uptime has been reset.
• B.FortiGate devices are not in sync because one device is down.
• C.FortiGate SN FGVM010000064692 is the primary because of higher HA uptime.
• D.FortiGate SN FGVM010000064692 has the higher HA priority.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Review the Intrusion Prevention System (IPS) profile signature settings. Which statement is correct in adding the FTP.Login.Failed signature to the IPS sensor profile?

• A.The signature setting uses a custom rating threshold.
• B.The signature setting includes a group of other signatures.
• C.Traffic matching the signature will be allowed and logged.
• D.Traffic matching the signature will be silently dropped and logged.

Comment: *

Name: *

Email: *

Verification: *

Which statement correctly describes the use of reliable logging on FortiGate?

• A.Reliable logging is enabled by default in all configuration scenarios.
• B.Reliable logging is required to encrypt the transmission of logs.
• C.Reliable logging can be configured only using the CLI.
• D.Reliable logging prevents the loss of logs when the local disk is full.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Based on the administrator profile settings, what permissions must the administrator set to run the diagnose firewall auth list CLI command on FortiGate?

• A.Custom permission for Network
• B.Read/Write permission for Log & Report
• C.CLI diagnostics commands permission
• D.Read/Write permission for Firewall

Comment: *

Name: *

Email: *

Verification: *

Which three statements are true regarding session-based authentication? (Choose three.)

• A.It is not recommended if multiple users are behind the source NAT
• B.HTTP sessions are treated as a single user.
• C.It requires more resources.
• D.It can differentiate among multiple clients behind the same source IP address.
• E.IP sessions from the same source IP address are treated as a single user.

Comment: *

Name: *

Email: *

Verification: *