Select the answer that describes what the CLI command diag debug authd fsso list is used for.

Review the IPsec diagnostics output of the command diag vpn tunnel list shown in the Exhibit.
Which of the following statements is correct regarding this output? (Select one answer).

Which of the following statements are correct regarding Application Control?

Review the CLI configuration below for an IPS sensor and identify the correct statements regarding
this configuration from the choices below. (Select all that apply.)
config ips sensor
edit “LINUX_SERVER”
set comment ”
set replacemsg-group ”
set log enable
config entries
edit 1
set action default
set application all
set location server
set log enable
set log-packet enable
set os Linux
set protocol all
set quarantine none
set severity all
set status default
next

end
next
end

Examine the Exhibits shown below, then answer the question that follows.
Review the following DLP Sensor (Exhibit 1):

Review the following File Filter list for rule #1 (Exhibit 2):

Review the following File Filter list for rule #2 (Exhibit 3):

Review the following File Filter list for rule #3 (Exhibit 4):

An MP3 file is renamed to `workbook.exe’ and put into a ZIP archive. It is then sent through the
FortiGate device over HTTP. It is intercepted and processed by the configuration shown in the
above Exhibits 1-4.
Assuming the file is not too large for the File scanning threshold, what action will the FortiGate unit
take?

Which of the following represents the correct order of criteria used for the selection of a Master unit
within a FortiGate High Availability (HA) cluster when master override is disabled?

In HA, the option Reserve Management Port for Cluster Member is selected as shown in the Exhibit
below.

Which of the following statements are correct regarding this setting? (Select all that apply.)

Shown below is a section of output from the debug command diag ip arp list.
index=2 ifname=port1 172.20.187.150 00:09:0f:69:03:7e
state=00000004 use=4589 confirm=4589 update=2422 ref=1
In the output provided, which of the following best describes the IP address 172.20.187.150?

Two devices are in an HA cluster, the device hostnames are STUDENT and REMOTE.
Exhibit A shows the command output of ‘diag sys session stat’ for the STUDENT device.
Exhibit B shows the command output of ‘diag sys session stat’ for the REMOTE device.
Exhibit A:

Exhibit B:

Given the information provided in the exhibits, which of the following statements are correct?
(Select all that apply.)

Which of the following statements are correct regarding virtual domains (VDOMs)? (Select all that
apply.)