View the exhibit, which contains a partial web filter profile configuration, and then answer the question below.

Which action will FortiGate take if a user attempts to access www.dropbox.com, which is categorized as File Sharing and Storage?

• A.FortiGate will exempt the connection based on the Web Content Filter configuration.
• B.FortiGate will block the connection based on the URL Filter configuration.
• C.FortiGate will allow the connection based on the FortiGuard category based filter configuration.
• D.FortiGate will block the connection as an invalid URL.

Comment: *

Name: *

Email: *

Verification: *

Which the following events can trigger the election of a new primary unit in a HA cluster? (Choose two.)

• A.Primary unit stops sending HA heartbeat keepalives.
• B.A secondary unit is removed from the HA cluster.
• C.The FortiGuard license for the primary unit is updated.
• D.One of the monitored interfaces in the primary unit is disconnected.

Comment: *

Name: *

Email: *

Verification: *

View the central management configuration shown in the exhibit, and then answer the question below.

Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243 is experiencing an outage?

• A.10.0.1.244
• B.One of the public FortiGuard distribution servers
• C.10.0.1.242
• D.10.0.1.240

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit, which contains partial output from an IKE real-time debug.

Why did the tunnel not come up?

• A.The local gateway has configured less secure encryption and hashing algorithms compared to the remote gateway.
• B.The Diffie-Hellman group does not match on the local and remote gateways.
• C.The proposal ID does not match between local and remote gateways.
• D.The encapsulation method for phase 2 is set to none on local and remote gateways.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit, which shows the output of a BGP debug command.

Which statement explains why the state of the 10.200.3.1 peer is Connect?

• A.The local router initiated the BGP session to 10.200.3.1 but did not receive a response.
• B.The local router has a different AS number than the remote peer.
• C.The local router is receiving BGP keepalives from the remote peer, but the local peer has not received the openConfirm yet.
• D.The router 10.200.3.1 has authentication configured for BGP and the local router does not.

Comment: *

Name: *

Email: *

Verification: *