QUESTION 99
If Internet Service is already selected as Source in a firewall policy, which other configuration objects can be added to the Source filed of a firewall policy?

QUESTION 100
Refer to the exhibit.

Based on the raw log, which two statements are correct? (Choose two.)

QUESTION 101
Why does FortiGate keep TCP sessions in the session table for some seconds even after both sides (client and server) have terminated the session?

QUESTION 102
Which two configuration settings are synchronized when FortiGate devices are in an active-active HA cluster? (Choose two.)

QUESTION 103
Refer to the exhibit to view the application control profile.

Based on the configuration, what will happen to Apple FaceTime?

QUESTION 104
If Internet Service is already selected as Destination in a firewall policy, which other configuration objects can be selected to the Destination field of a firewall policy?

QUESTION 105
Refer to the exhibit.


The exhibit contains the configuration for an SD-WAN Performance SLA, as well as the output of diagnose sys virtual-wan-link health-check.
Which interface will be selected as an outgoing interface?

QUESTION 106
Which downstream FortiGate VDOM is used to join the Security Fabric when split-task VDOM is enabled on all FortiGate devices?

QUESTION 107
Which two protocols are used to enable administrator access of a FortiGate device? (Choose two.)

QUESTION 108
Which two attributes are required on a certificate so it can be used as a CA certificate on SSL Inspection? (Choose two.)

QUESTION 109
A FortiGate is operating in NAT mode and configured with two virtual LAN (VLAN) sub interfaces added to the physical interface.
Which statements about the VLAN sub interfaces can have the same VLAN ID, only if they have IP addresses in different subnets.

QUESTION 110
Refer to the exhibit.

The exhibit shows the IPS sensor configuration.
If traffic matches this IPS sensor, which two actions is the sensor expected to take? (Choose two.)

QUESTION 111
A network administrator wants to set up redundant IPsec VPN tunnels on FortiGate by using two IPsec VPN tunnels and static routes.
* All traffic must be routed through the primary tunnel when both tunnels are up
* The secondary tunnel must be used only if the primary tunnel goes down
* In addition, FortiGate should be able to detect a dead tunnel to speed up tunnel failover Which two key configuration changes are needed on FortiGate to meet the design requirements? (Choose two,)

QUESTION 112
An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)

QUESTION 113
Which two statements are true when FortiGate is in transparent mode? (Choose two.)

QUESTION 114
A team manager has decided that, while some members of the team need access to a particular website, the majority of the team does not Which configuration option is the most effective way to support this request?

QUESTION 115
Refer to the exhibit.

Which contains a network diagram and routing table output.
The Student is unable to access Webserver.
What is the cause of the problem and what is the solution for the problem?

QUESTION 116
Examine this output from a debug flow:

Why did the FortiGate drop the packet?

QUESTION 117
Refer to the exhibit.

In the network shown in the exhibit, the web client cannot connect to the HTTP web server. The administrator runs the FortiGate built-in sniffer and gets the output as shown in the exhibit.
What should the administrator do next to troubleshoot the problem?

QUESTION 118
Which statement is correct regarding the inspection of some of the services available by web applications embedded in third-party websites?

QUESTION 119
Which statement about the policy ID number of a firewall policy is true?

QUESTION 120
Which statement regarding the firewall policy authentication timeout is true?

QUESTION 121
Which three security features require the intrusion prevention system (IPS) engine to function? (Choose three.)

QUESTION 122
When configuring a firewall virtual wire pair policy, which following statement is true?

QUESTION 123
Which two types of traffic are managed only by the management VDOM? (Choose two.)