A network administrator needs to implement dynamic route redundancy between a
FortiGate unit located in a remote office and a FortiGate unit located in the central office.
The remote office accesses central resources using IPSec VPN tunnels through two
different Internet providers. What is the best method for allowing the remote office access to
the resources through the FortiGate unit used at the central office?

A FortiClient fails to establish a VPN tunnel with a FortiGate unit. Which of the following
statements is a possible cause for the failure to establish the VPN tunnel?

An administrator sets up a new FTP server on TCP port 2121. A FortiGate unit is located
between the FTP clients and the server. The administrator has created a policy for TCP port
2121. Users have been complaining that when downloading data they receive a 200 Port
command successful message followed by a 425 Cannot build data connection message.
Which of the following statements represents the best solution to this problem?

Which of the following Session TTL values will take precedence?

Which of the following items is NOT a packet characteristic matched by a firewall service
object?

When configuring a server load balanced virtual IP, which of the following is the best
distribution algorithm to be used in applications where the same physical destination server
must be maintained between sessions?

A network administrator connects his PC to the INTERNAL interface on a FortiGate unit.
The administrator attempts to make an HTTPS connection to the FortiGate unit on the
VLAN1 interface at the IP address of 10.0.1.1, but gets no connectivity. The following
troubleshooting commands are executed from the DOS prompt on the PC and from the CLI.
Based on the output from these commands, which of the following explanations is a
possible cause of the problem?

A network administrator connects his PC to the INTERNAL interface on a FortiGate unit.
The administrator attempts to make an HTTPS connection to the FortiGate unit on the
VLAN1 interface at the IP address of 10.0.1.1, but gets no connectivity. The following
troubleshooting commands are executed from the CLI: Based on the output from these
commands, which of the following is a possible cause of the problem?

WAN optimization is configured in Active/Passive mode. When will the remote peer accept
an attempt to initiate a tunnel?

Which of the following methods does the FortiGate unit use to determine the availability of a
web cache using Web Cache Communication Protocol (WCCP)?