A corporate network allows Internet Access to FSSO users only. The FSSO user student does not have Internet access after successfully logged into the Windows AD network. The output of the 'diagnose debug authd fsso list' command does not show student as an active FSSO user. Other FSSO users can access the Internet without problems. What should the administrator check? (Choose two.)

• A.The user student must not be listed in the CA's ignore user list.
• B.The user student must belong to one or more of the monitored user groups.
• C.The student workstation's IP subnet must be listed in the CA's trusted list.
• D.At least one of thestudent's user groups must be allowed by a FortiGate firewall policy.

Comment: *

Name: *

Email: *

Verification: *

The CLI command set intelligent-mode <enable | disable> controls the IPS engine's adaptive scanning behavior. Which of the following statements describes IPS adaptive scanning?

• A.Determines the optimal number of IPS engines required based on system load.
• B.Downloads signatures on demand from FDS based on scanning requirements.
• C.Determines when it is secure enough to stop scanning session traffic.
• D.Choose a matching algorithm based on available memory and the type of inspection being performed.

Comment: *

Name: *

Email: *

Verification: *

View the exhibit, which contains the output of a diagnose command, and then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)

• A.FortiGate will probe 121.111.236.179 every fifteen minutes for a response.
• B.Servers with the D flag are considered to be down.
• C.Servers with a negative TZ value are experiencing a service outage.
• D.FortiGate used 209.222.147.3 as the initial server to validate its contract.

Comment: *

Name: *

Email: *

Verification: *

What does the dirty flag mean in a FortiGate session?

• A.Traffic has been blocked by the antivirus inspection.
• B.The next packet must be re-evaluated against the firewall policies.
• C.The session must be removed from the former primary unit after an HA failover.
• D.Traffic has been identified as from an application that is not allowed.

Comment: *

Name: *

Email: *

Verification: *

Examine the following partial output from a sniffer command; then answer the question below.

What is the meaning of the packets dropped counter at the end of the sniffer?

• A.Number of packets that didn't match the sniffer filter.
• B.Number of total packets dropped by the FortiGate.
• C.Number of packets that matched the sniffer filter and were dropped by the FortiGate.
• D.Number of packets that matched the sniffer filter but could not be captured by the sniffer.

Comment: *

Name: *

Email: *

Verification: *