New Questions 4

View the exhibit.

A user behind the FortiGate is trying to go to http://www.addictinggames.com (Addicting.Games). Based on this configuration, which statement is true?

A. Addicting.Games is allowed based on the Application Overrides configuration.

B. Addicting.Games is blocked based on the Filter Overrides configuration.

C. Addicting.Games can be allowed only if the Filter Overrides actions is set to Exempt.

D. Addicting.Games is allowed based on the Categories configuration.

View Answer

New Questions 5

An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)

A. The interface has been configured for one-arm sniffer.

B. The interface is a member of a virtual wire pair.

C. The operation mode is transparent.

D. The interface is a member of a zone.

E. Captive portal is enabled in the interface.

View Answer

New Questions 6

Which statement about the firewall policy authentication timeout is true?

A. It is a hard timeout. The FortiGate removes the temporary policy for a useru2021s source IP address after this times expires.

B. It is a hard timeout. The FortiGate removes the temporary policy for a useru2021s source MAC address after this times expires.

C. It is an idle timeout. The FortiGate considers a user to be idle if it does not see any

packets coming from the useru2021s source MAC address.

D. It is an idle timeout. The FortiGate considers a user to be idle if it does not see any packets coming from the useru2021s source IP.

View Answer

New Questions 7

How does FortiGate verify the login credentials of a remote LDAP user?

A. FortiGate sends the user entered credentials to the LDAP server for authentication.

B. FortiGate re-generates the algorithm based on the login credentials and compares it against the algorithm stored on the LDAP server.

C. FortiGate queries its own database for credentials.

D. FortiGate queries the LDAP server for credentials.

View Answer

New Questions 8

When browsing to an internal web server using a web-mode SSL VPN bookmark, which IP address is used as the source of the HTTP request?

A. The FortiGate unitu2021s public IP address

B. The FortiGate unitu2021s internal IP address

C. The remote useru2021s virtual IP address

D. The remote useru2021s public IP address

View Answer

New Questions 9

Which statements about One-to-One IP pool are true? (Choose two.)

A. It allows configuration of ARP replies.

B. It allows fixed mapping of an internal address range to an external address range.

C. It is used for destination NAT.

D. It does not use port address translation.

View Answer

New Questions 10

What step is required to configure an SSL VPN to access to an internal server using port forward mode?

A. Configure the virtual IP addresses to be assigned to the SSL VPN users.

B. Install FortiClient SSL VPN client

C. Create a SSL VPN realm reserved for clients using port forward mode.

D. Configure the client application to forward IP traffic to a Java applet proxy.

View Answer

New Questions 11

How do you configure a FortiGate to do traffic shaping of P2P traffic, such as BitTorrent?

A. Apply an application control profile allowing BitTorrent to a firewall policy and configure a traffic shaping policy.

B. Enable the shape option in a firewall policy with service set to BitTorrent.

C. Apply a traffic shaper to a BitTorrent entry in the SSL/SSH inspection profile.

D. Apply a traffic shaper to a protocol options profile.

View Answer

New Questions 12

What inspections are executed by the IPS engine? (Choose three.)

A. Application control

B. Flow-based data leak prevention

C. Proxy-based antispam

D. Flow-based web filtering

E. Proxy-based antivirus

View Answer

New Questions 13

When using WPAD DNS method, what is the FQDN format that browsers use to query the DNS server?

A. wpad.<local-domain>

B. srv_tcp.wpad.<local-domain>

C. srv_proxy.<local-domain>/wpad.dat

D. proxy.<local-domain>.wpad

View Answer