Review the IPsec diagnostics output of the command diag vpn tunnel list shown in the Exhibit below.

Which of the following statements are correct regarding this output? (Select all that apply.)

In HA, what is the effect of the Disconnect Cluster Member command as given in the Exhibit.

Which of the following statements are correct about the HA diag command diagnose sys ha resetuptime? (Select all that apply.)

Two FortiGate devices fail to form an HA cluster, the device hostnames are STUDENT and
REMOTE. Exhibit A shows the command output of ‘show system ha’ for the STUDENT device.
Exhibit B shows the command output of ‘show system ha’ for the REMOTE device.
Exhibit A:

Exhibit B:

Which one of the following is the most likely reason that the cluster fails to form?

In a High Availability cluster operating in Active-Active mode, which of the following correctly
describes the path taken by the SYN packet of an HTTP session that is offloaded to a subordinate
unit?

Review the output of the command config router ospf shown in the Exhibit below; then answer the
question following it.

Which one of the following statements is correct regarding this output?

Data Leak Prevention archiving gives the ability to store files and message data onto a
FortiAnalyzer unit for which of the following types of network traffic? (Select all that apply.)

The eicar test virus is put into a zip archive, which is given the password of “Fortinet” in order to
open the archive. Review the configuration in the exhibits shown below; then answer the question
that follows.
Exhibit A – Antivirus Profile:

Exhibit B – Non-default UTM Proxy Options Profile:

Exhibit C – DLP Profile:

Which of one the following profiles could be enabled in order to prevent the file from passing through
the FortiGate device over HTTP on the standard port for that protocol?

Examine the exhibit shown below then answer the question that follows it.

Within the UTM Proxy Options, the CA certificate Fortinet_CA_SSLProxy defines which of the
following:

Examine the Exhibit shown below; then answer the question following it.

The Vancouver FortiGate unit initially had the following information in its routing table:
S 172.20.0.0/16 [10/0] via 172.21.1.2, port2
C 172.21.0.0/16 is directly connected, port2
C 172.11.11.0/24 is directly connected, port1
Afterwards, the following static route was added:
config router static
edit 6
set dst 172.20.1.0 255.255.255.0
set pririoty 0
set device port1
set gateway 172.11.12.1
next
end
Since this change, the new static route is NOT showing up in the routing table. Given the
information provided, which of the following describes the cause of this problem?