View the exhibit, which contains the output of a real-time debug, and then answer the question below.

Which of the following statements is true regarding this output? (Choose two.)

• A.FortiGate found the requested URL in its local cache.
• B.The requested URL belongs to category ID 52.
• C.The web request was allowed by FortiGate.
• D.This web request was inspected using the root web filter profile.

Comment: *

Name: *

Email: *

Verification: *

Examine the partial output from the IKE real time debug shown in the exhibit; then answer the question below.

Why didn't the tunnel come up?

• A.One IPsec gateway is using main mode, while theother IPsec gateway is using aggressive mode.
• B.The remote gateway's Phase-1 configuration does not match the local gateway's phase-1 configuration.
• C.IKE mode configuration is not enabled in the remote IPsec gateway.
• D.Theremote gateway's Phase-2 configuration does not match the local gateway's phase-2 configuration.

Comment: *

Name: *

Email: *

Verification: *

Which statement about memory conserve mode is true?

• A.A FortiGate exits conserve mode when the configured memory use threshold reaches yellow.
• B.A FortiGate starts dropping all the new and old sessions when the configured memory use threshold reaches extreme.
• C.A FortiGate enters conserve mode when the configured memory use threshold reaches red
• D.A FortiGate starts dropping new sessions when the configured memory use threshold reaches red

Comment: *

Name: *

Email: *

Verification: *

View the exhibit, which contains the partial output of a diagnose command, and then answer the question below.

Based on the output, which of the following statements is correct?

• A.Remote gateway IP is 10.200.5.1.
• B.DPD is disabled.
• C.Anti-reply is enabled.
• D.Quick mode selectors are disabled.

Comment: *

Name: *

Email: *

Verification: *

When using the SSL certificate inspection method to inspect HTTPS traffic, how does FortiGate filter web requests when the client browser does not provide the server name indication (SNI) extension?

• A.FortiGate uses the CN information from the Subject field in the server certificate.
• B.FortiGate switches to the full SSL inspection method to decrypt the data.
• C.FortiGate uses the requested URL from the user's web browser.
• D.FortiGate blocks the request without any further inspection.

Comment: *

Name: *

Email: *

Verification: *