Which two statements about the Security Fabric are true? (Choose two.)

• A.Each FortiGate device in the Security Fabric must have bidirectional FortiTelemetry connectivity.
• B.Only the root FortiGate collects network topology information and forwards it to FortiAnalyzer.
• C.Only FortiGate devices with configuration-sync sel to Local receive and synchronize the global CMDB objects that the root FortiGate sends.
• D.Each member of the Security Fabric maintains the shared Security Fabric map.
• E.FortiGate uses the FortiTelemetry protocol to communicate with FortiAnalyzer.

Comment: *

Name: *

Email: *

Verification: *

You want to improve reliability over a lossy IPSec tunnel.
Which combination of IPSec phase 1 parameters should you configure?

• A.fec-ingress and fec-egress
• B.Odpd and dpd-retryinterval
• C.fragmentation and fragmentation-mtu
• D.keepalive and keylive

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit, which shows config system central-management information.

Which setting must you configure for the web filtering feature to function?

• A.Add server. fortiguard. net to the server list.
• B.Configure securewf.fortiguard. net on the default servers.
• C.Set update-server-location to automatic.
• D.Configure server-type with the rating option.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit, which shows an OSPF network.

Which types of ink-state advertisements (LSA) will NGFW-1 send, if itis a backup designated router (BDR)?

• A.ONGFW-1 will send type 1 and type 4 LSA.
• B.ONGFW-1 will send type 1 and type 2 LSAs.
• C.ONGFW-1 will send type 1and type 5 LSA.
• D.NGFW-1 will send type 1and type 3 LSA.

Comment: *

Name: *

Email: *

Verification: *

Which two features are true regarding IPS hardware acceleration? (Choose two.)

• A.set np-access-mode basic will provide last path for IPS inspected traffic
• B.FortiGate does not support IPSA if the cp-accel-mode is configured as none.
• C.Network processors provide pre-IPS anomaly filtering and logging
• D.cp-accel-iaode advanced option is available only on FortiGate devices that have one or more CP8 processors

Comment: *

Name: *

Email: *

Verification: *