An administrator has configured a FortiGate unit so that end users must authenticate
against the firewall using digital certificates before browsing the Internet. What must the
user have for a successful authentication? (Select all that apply.)

The FortiGate unit can be configured to allow authentication to a RADIUS server. The
RADIUS server can use several different authentication protocols during the authentication

process. Which of the following are valid authentication protocols that can be used when a
user authenticates to the RADIUS server? (Select all that apply.)

Which of the following are valid components of the Fortinet Server Authentication
Extensions (FSAE)? (Select all that apply.)

A client can create a secure connection to a FortiGate using SSL VPN in web-only mode.
Which one of the following statements is correct regarding the use of web-only mode SSL
VPN?

A FortiGate unit can create a secure connection to a client using SSL VPN in tunnel mode.
Which of the following statements are correct regarding the use of tunnel mode SSL VPN?
(Select all that apply.)

In an IPSec gateway-to-gateway configuration, two FortiGate units create a VPN tunnel
between two separate private networks. Which of the following configuration steps must be
performed on both FortiGate units to support this configuration? (Select all that apply.)

How is traffic routed onto an SSL VPN tunnel from the FortiGate unit side?

An end user logs into the SSL VPN portal and selects the Tunnel Mode option by clicking on
the “Connect” button. The administrator has not enabled split tunneling and so the end user
must access the Internet through the SSL VPN Tunnel. Which firewall policies are needed
to allow the end user to not only access the internal network but also reach the Internet?

Which of the following antivirus and attack definition update features are supported by
FortiGate units? (Select all that apply.)

By default the Intrusion Protection System (IPS) on a FortiGate unit is set to perform which
action?