A FortiGate unit is configured with three Virtual Domains (VDOMs) as illustrated in the
exhibit. Which of the following statements are correct regarding these VDOMs? (Select all
that apply.)

A FortiGate administrator configures a Virtual Domain (VDOM) for a new customer. After
creating the VDOM, the administrator is unable to reassign the dmz interface to the new
VDOM as the option is greyed out in Web Config in the management VDOM. What would
be a possible cause for this problem?

A FortiGate unit is operating in NAT/Route mode and is configured with two Virtual LAN
(VLAN) subinterfaces added to the same physical interface. Which of the following
statements is correct regarding the VLAN IDs in this scenario?

An intermittent connectivity issue is noticed between two devices located behind the
FortiGate dmz and internal interfaces. A continuous sniffer trace is run on the FortiGate unit
that the administrator will convert into a .cap file for an off-line analysis with a sniffer
application. Given the high volume of global traffic on the network, which of the following
CLI commands will best allow the administrator to perform this troubleshooting operation?

The Host Check feature can be enabled on the FortiGate unit for SSL VPN connections.
When this feature is enabled, the FortiGate unit probes the remote host computer to verify
that it is “safe” before access is granted. Which of the following items is NOT an option as
part of the Host Check feature?

In the Tunnel Mode widget of the web portal, the administrator has configured an IP Pool
and enabled split tunneling. Which of the following statements is true about the IP address
used by the SSL VPN client?

An issue could potentially occur when clicking Connect to start tunnel mode SSL VPN. The
tunnel will start up for a few seconds, then shut down. Which of the following statements
best describes how to resolve this issue?

You are the administrator in charge of a FortiGate unit which acts as a VPN gateway. You
have chosen to use Interface Mode when configuring the VPN tunnel and you want users
from either side to be able to initiate new sessions. There is only 1 subnet at either end and
the FortiGate unit already has a default route. Which of the following configuration steps are
required to achieve these objectives? (Select all that apply.)

An administrator configures a VPN and selects the Enable IPSec Interface Mode option in
the phase 1 settings. Which of the following statements are correct regarding the IPSec
VPN configuration?

What advantages are there in using a fully Meshed IPSec VPN configuration instead of a
hub and spoke set of IPSec tunnels?