Which of the following configuration steps are required to achieve these objectives?
You are the administrator in charge of a FortiGate unit which acts as a VPN gateway. You
have chosen to use Interface Mode when configuring the VPN tunnel and you want users
from either side to be able to initiate new sessions. There is only 1 subnet at either end and
the FortiGate unit already has a default route. Which of the following configuration steps are
required to achieve these objectives? (Select all that apply.)
Which of the following statements are correct regarding the IPSec VPN configuration?
An administrator configures a VPN and selects the Enable IPSec Interface Mode option in
the phase 1 settings. Which of the following statements are correct regarding the IPSec
VPN configuration?
What advantages are there in using a hub-and-spoke IPSec VPN configuration instead of a fullymeshed set of IPS
What advantages are there in using a hub-and-spoke IPSec VPN configuration instead of a
fullymeshed set of IPSec tunnels? (Select all that apply.)
Which of the following statements are correct regarding FSSO in a Windows domain environment when NTLM and Pol
FSSO provides a single sign on solution to authenticate users transparently to a FortiGate
unit using credentials stored in Windows Active Directory. Which of the following statements
are correct regarding FSSO in a Windows domain environment when NTLM and Polling
Mode are not used? (Select all that apply.)
Which of the following represents the correct order of criteria used for the selection…?
Which of the following represents the correct order of criteria used for the selection of a
Master unit within a FortiGate High Availability (HA) cluster when master override is
disabled?
which of the following correctly describes the path taken by the SYN packet of an HTTP session that is offload
In a High Availability cluster operating in Active-Active mode, which of the following correctly
describes the path taken by the SYN packet of an HTTP session that is offloaded to a
subordinate unit?
Which of the following statements are correct regarding virtual domains (VDOMs)?
Which of the following statements are correct regarding virtual domains (VDOMs)? (Select
all that apply.)
which of the following types of network traffic?
Data Leak Prevention archiving gives the ability to store files and message data onto a
FortiAnalyzer unit for which of the following types of network traffic? (Select all that apply.)
Which of the following statements are correct regarding Application Control?
Which of the following statements are correct regarding Application Control? (Select all that
apply.)
Within the UTM Proxy Options, the CA certificate Fortinet_CA_SSLProxy defines which of the following:
Examine the exhibit shown below then answer the question that follows it. Within the UTM
Proxy Options, the CA certificate Fortinet_CA_SSLProxy defines which of the following:
