In the Tunnel Mode widget of the web portal, the administrator has configured an IP Pool
and enabled split tunneling. Which of the following statements is true about the IP address
used by the SSL VPN client?

An issue could potentially occur when clicking Connect to start tunnel mode SSL VPN. The
tunnel will start up for a few seconds, then shut down. Which of the following statements
best describes how to resolve this issue?

You are the administrator in charge of a FortiGate unit which acts as a VPN gateway. You
have chosen to use Interface Mode when configuring the VPN tunnel and you want users
from either side to be able to initiate new sessions. There is only 1 subnet at either end and
the FortiGate unit already has a default route. Which of the following configuration steps are
required to achieve these objectives? (Select all that apply.)

An administrator configures a VPN and selects the Enable IPSec Interface Mode option in
the phase 1 settings. Which of the following statements are correct regarding the IPSec
VPN configuration?

What advantages are there in using a fully Meshed IPSec VPN configuration instead of a
hub and spoke set of IPSec tunnels?

A network administrator needs to implement dynamic route redundancy between a
FortiGate unit located in a remote office and a FortiGate unit located in the central office.
The remote office accesses central resources using IPSec VPN tunnels through two
different Internet providers. What is the best method for allowing the remote office access to
the resources through the FortiGate unit used at the central office?

A FortiClient fails to establish a VPN tunnel with a FortiGate unit. Which of the following
statements is a possible cause for the failure to establish the VPN tunnel?

An administrator sets up a new FTP server on TCP port 2121. A FortiGate unit is located
between the FTP clients and the server. The administrator has created a policy for TCP port
2121. Users have been complaining that when downloading data they receive a 200 Port
command successful message followed by a 425 Cannot build data connection message.
Which of the following statements represents the best solution to this problem?

Which of the following Session TTL values will take precedence?

Which of the following items is NOT a packet characteristic matched by a firewall service
object?