DLP archiving gives the ability to store session transaction data on a FortiAnalyzer unit for
which of the following types of network traffic? (Select all that apply.)

FortiGate units are preconfigured with four default protection profiles. These protection
profiles are used to control the type of content inspection to be performed. What action must
be taken for one of these profiles to become active?

A FortiGate 60 unit is configured for your small office. The DMZ interface is connected to a
network containing a web server and email server. The Internal interface is connected to a
network containing 10 user workstations and the WAN1 interface is connected to your ISP.
You want to configure firewall policies so that your users can send and receive email
messages to the email server on the DMZ network. You also want the email server to be
able to retrieve email messages from an email server hosted by your ISP using the POP3
protocol. Which policies must be created for this communication? (Select all that apply.)

The ordering of firewall policies is very important. Policies can be re-ordered within the
FortiGate Web Config and also using the CLI. The command used in the CLI to perform this
function is __________.

Which of the following network protocols can be used to access a FortiGate unit as an
administrator?

Which of the following statements is correct regarding a FortiGate unit operating in
NAT/Route mode?

Which of the following statements correctly describes how a FortiGate unit functions in
Transparent mode?

The Idle Timeout setting on a FortiGate unit applies to which of the following?

You wish to create a firewall policy that applies only to traffic intended for your web server.
The server has an IP address of 192.168.2.2 and belongs to a class C subnet. When
defining the firewall address for use in this policy, which one of the following addressing
formats is correct?

If a FortiGate unit has a dmz interface IP address of 210.192.168.2 with a subnet mask of
255.255.255.0, what is a valid dmz DHCP addressing range?