A FortiGate is configured as an explicit web proxy. Clients using this web proxy are reposting DNS errors when accessing any website. Theadministrator executes the following debug commands and observes that the n-dns-timeout counter is increasing:

What should the administrator check to fix the problem?

• A.The connectivity between the FortiGate unit and the DNS server.
• B.That DNS traffic from client workstations is allowed by the explicit web proxy policies.
• C.That DNS service is enabled in the explicit web proxy interface.
• D.Theconnectivity between the client workstations and the DNS server.

Comment: *

Name: *

Email: *

Verification: *

An administrator has configured two FortiGate devices for an HA cluster. While testing HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary device. The administrator decides to enable the setting link-failed-signal to fix the problem.
Which statement about this setting is true?

• A.It forces the former primary device to shut down all its non-heartbeat interfaces for one second, while the failover occurs.
• B.It sends an ARP packet to all connected devices, indicating that the HA virtual MAC address is reachable through a new master after a failover.
• C.It disabled all the non-heartbeat interfaces in all HA members for two seconds after a failover.
• D.It sends a link failed signal to all connected devices.

Comment: *

Name: *

Email: *

Verification: *

View the exhibit, which contains an entry in the session table, and then answer the question below.

Which one of the following statements is true regarding FortiGate's inspection of this session?

• A.FortiGate applied proxy-based inspection.
• B.FortiGate forwarded this session without any inspection.
• C.FortiGate applied flow-based inspection.
• D.FortiGate applied explicit proxy-based inspection.

Comment: *

Name: *

Email: *

Verification: *

How does FortiManager handle FortiGuard requests from FortiGate devices, when it is configured as a local FDS?

• A.FortiManager does not support rating requests.
• B.FortiManager can download and maintain local copies of FortiGuard databases.
• C.FortiManager will respond to update requests only if they originate from a managed device.
• D.FortiManager supports only FortiGuard push to managed devices.

Comment: *

Name: *

Email: *

Verification: *

Examine the following traffic log; then answer the question below.
date-20xx-02-01 time=19:52:01 devname=master device_id="xxxxxxx" log_id=0100020007 type=event subtype=system pri critical vd=root service=kemel status=failure msg="NAT port is exhausted." What does the log mean?

• A.There is not enough available memory in the system to create a new entry inthe NAT port table.
• B.The limit for the maximum number of entries in the NAT port table has been reached.
• C.The limit for the maximum number of simultaneous sessions sharing the same NAT port has been reached.
• D.FortiGate does not have any available NAT port for a new connection.

Comment: *

Name: *

Email: *

Verification: *