Refer to the exhibit, which contains a partial configuration of the global system.

What can you conclude from the output?

• A.set check-protocol-header loose command enables hardware acceleration on this FortiGate device.
• B.set memory-use-threshoId-extreme command instructs the FortiGate to disable hardware acceleration if the memory extreme threshold reaches 95%
• C.set strict-d^rty-session-check enable command instructs the FortiGate to offload all dirty session traffic to its SPU
• D.set av-failopen pass command instructs the FortiGate to offload all traffic that uses the antivirus proxy to NP.

Comment: *

Name: *

Email: *

Verification: *

Exhibit.

Refer to the exhibit, which contains a CLI script configuration on fortiManager. An administrator configured the CLI script on FortiManager rut the script tailed to apply any changes to the managed device after being executed.
What are two reasons why the script did not make any changes to the managed device? (Choose two)

• A.The commands that start with the # sign did not run.
• B.Incomplete commands can cause CLI scripts to fail.
• C.Static routes can be added using only TCI scripts.
• D.CLI scripts must start with #!.

Comment: *

Name: *

Email: *

Verification: *

Exhibit.

Refer to the exhibit, which shows a partial web filter profile conjuration What can you cone udo from this configuration about access to www.facebook, com, which is categorized as Social Networking?

• A.The access is blocked based on the Content Filter configuration
• B.The access is allowed based on the FortiGuard Category Based Filter configuration
• C.The access is blocked based on the URL Filter configuration
• D.The access is hocked if the local or the public FortiGuard server does not reply

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit, which shows an SSL certification inspection configuration.

Which action does FortiGate take if the server name indication (SNI) does not match either the common name (CN) or any of the subject alternative names (SAN) in the server certificate?

• A.FortiGate closes the connection because this represents an invalid SSL/TLS configuration
• B.FortiGate uses the CN information from the Subject field in the server certificate
• C.FortiGate uses the SNI from the user's web browser.
• D.FortiGate uses the first entry listed in the SAN field in the server certificate

Comment: *

Name: *

Email: *

Verification: *

Exhibit.

Refer to the exhibit, which shows an ADVPN network.
The client behind Spoke-1 generates traffic to the device located behind Spoke-2.
Which first message floes the hub send to Spoke-110 bring up the dynamic tunnel?

• A.Shortcut query
• B.Shortcut reply
• C.Shortcut offer
• D.Shortcut forward

Comment: *

Name: *

Email: *

Verification: *