NEW QUESTION 56
Refer to the exhibit.

Given the interfaces shown in the exhibit. which two statements are true? (Choose two.)

NEW QUESTION 57
View the exhibit:

Which the FortiGate handle web proxy traffic rue? (Choose two.)

NEW QUESTION 58
Refer to the exhibit.

Based on the administrator profile settings, what permissions must the administrator set to run the diagnose firewall auth list CLI command on FortiGate?

NEW QUESTION 59
Which two statements are true about the FGCP protocol? (Choose two.)

NEW QUESTION 60
An administrator has configured the following settings:

What are the two results of this configuration? (Choose two.)

NEW QUESTION 61
Which two statements are true about collector agent advanced mode? (Choose two.)

NEW QUESTION 62
Which three pieces of information does FortiGate use to identify the hostname of the SSL server when SSL certificate inspection is enabled? (Choose three.)

NEW QUESTION 63
An administrator is running the following sniffer command:

Which three pieces of Information will be Includedin me sniffer output? {Choose three.)

NEW QUESTION 64
An administrator has configured a strict RPF check on FortiGate. Which statement is true about the strict RPF check?

NEW QUESTION 65
Refer to the exhibit.

The exhibit shows a CLI output of firewall policies, proxy policies, and proxy addresses.
How
does FortiGate process the traffic sent to http://www.fortinet.com?

NEW QUESTION 66
Examine the exhibit, which contains a virtual IP and firewall policy configuration.



The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port2) interface has the IP address 10.0.1.254/24.
The first firewall policy has NAT enabled on the outgoing interface address. The second firewall policy is configured with a VIP as the destination address.
Which IP address will be used to source NAT the Internet traffic coming from a workstation with the IP address 10.0.1.10/24?

NEW QUESTION 67
When browsing to an internal web server using a web-mode SSL VPN bookmark, which IP address is used as the source of the HTTP request?

NEW QUESTION 68
An administrator is running the following sniffer command:

Which three pieces of Information will be Included in me sniffer output? {Choose three.)

NEW QUESTION 69
View the exhibit. A user behind the FortiGate is trying to go to http://www.addictinggames.com (Addicting Games). Based on this configuration, which statement is true?

NEW QUESTION 70
Which two statements are true about the RPF check? (Choose two.)

NEW QUESTION 71
Which three statements about security associations (SA) in IPsec are correct? (Choose three.)

NEW QUESTION 72
Which of the following SD-WAN load -balancing method use interface weight value to distribute traffic?
(Choose two.)

NEW QUESTION 73
Consider the topology:
Application on a Windows machine <–{SSL VPN} –>FGT–> Telnet to Linux server.
An administrator is investigating a problem where an application establishes a Telnet session to a Linux server over the SSL VPN through FortiGate and the idle session times out after about 90 minutes. The administrator would like to increase or disable this timeout.
The administrator has already verified that the issue is not caused by the application or Linux server. This issue does not happen when the application establishes a Telnet connection to the Linux server directly on the LAN.
What two changes can the administrator make to resolve the issue without affecting services running through FortiGate? (Choose two.)