Refer to the exhibit.

The exhibit shows the configuration of a service protection profile (SPP) in a FortiDDoS device.
Which two statements are true about the traffic matching being inspected by this SPP? (Choose two.)

• A.FortiDDoS will not send a SYN/ACK if a SYN packet is coming from an IP address that is not in the legitimate IP (LIP) address table.
• B.Traffic that does not match any SPP policy will be inspected by this SPP.
• C.SYN packets with payloads will be dropped.
• D.FortiDDoS will start dropping packets as soon as the traffic exceeds the configured minimum threshold.

Comment: *

Name: *

Email: *

Verification: *

A customer wants to integrate their on-premise FortiGate with their Azure infrastructure.
Which two components must be in place to configure the Azure Fabric connector? (Choose two.)

• A.An outbound policy from the Azure FortiGate-VM virtual appliance.
• B.A FortiGate-VM virtual appliance deployed in Azure.
• C.An inbound policy from the Azure FortiGate-VM virtual appliance.
• D.FortiGate-VM virtual appliance deployed on-premise.

Comment: *

Name: *

Email: *

Verification: *

You configured a firewall policy with only a Web filter profile for accessing the Internet. Access to websites belonging to the "Information Technology" category are blocked and to the "Business" category are allowed. SSL deep inspection is not enabled on this policy.
A user wants to access the website https://www.it-acme.com which presents a certificate with CN=www.acme.com. The it-acme.com domain is categorized as "Information Technology" and the acme.com domain is categorized as "Business".
Which statement regarding this scenario is correct?

• A.The website will be allowed by category "Business" as the certificate name takes precedence over the
  URL.
• B.The FortiGate is able to read the URL within HTTPS sessions when using SSL certificate inspection so the website will be blocked by the "Information Technology".
• C.Only with SSL deep inspection enabled will the FortiGate be able to categorized this website.
• D.The website will be blocked by category "Information Technology" as the SNI takes precedence over the certificate name.

Comment: *

Name: *

Email: *

Verification: *

You must create a high Availability deployment with two FortiWebs in Amazon Services (AWS): each on different Availability Zones(AZ) from the same region. At the same time, each FortiWeb should be able to deliver content from the Web server of both of the AZs. Which deployment would will this requirement?

• A.Configure the FortiWebs Active-Active Ha mode and use AWS Router 53 load Router balance the internal Web servers.
• B.Configure the FortiWebs in Active-Active HA mode and use AWS Elastic load Balancer (ELB) for the internal Web servers.
• C.Use AWS Router 53 to load balance FortiWebs in standone mode and use AWS Virtual private Cloud (VPC) peering to load balance the internal Web servers.
• D.Use AWS Elastic load Balancer (ELB) for both FortiWebs in standdone mode and the internal Web servers in an ELB sandwich.

Comment: *

Name: *

Email: *

Verification: *

Click the Exhibit button.
Referring to the exhibit, what will happen if FortiSandbox categorizes an e-mail attachment submitted by FortiMail as a high risk?

• A.The high-risk tile will go to the system quarantine.
• B.The high-risk file will be discarded by attachment analysis.
• C.The high-risk file will be discarded by malware/virus outbreak protection.
• D.The high-risk file will be received by the recipient.

Comment: *

Name: *

Email: *

Verification: *