An administrator has configured a FortiGate unit so that end users must authenticate
against the firewall using digital certificates before browsing the Internet. What must the
user have for a successful authentication? (Select all that apply.)

The FortiGate unit can be configured to allow authentication to a RADIUS server. The
RADIUS server can use several different authentication protocols during the authentication

process. Which of the following are valid authentication protocols that can be used when a
user authenticates to the RADIUS server? (Select all that apply.)

Which of the following are valid components of the Fortinet Server Authentication
Extensions (FSAE)? (Select all that apply.)

A FortiGate unit can create a secure connection to a client using SSL VPN in tunnel mode.
Which of the following statements are correct regarding the use of tunnel mode SSL VPN?
(Select all that apply.)

An end user logs into the SSL VPN portal and selects the Tunnel Mode option by clicking on
the “Connect” button. The administrator has not enabled split tunneling and so the end user
must access the Internet through the SSL VPN Tunnel. Which firewall policies are needed
to allow the end user to not only access the internal network but also reach the Internet?

Which of the following antivirus and attack definition update features are supported by
FortiGate units? (Select all that apply.)

By default the Intrusion Protection System (IPS) on a FortiGate unit is set to perform which
action?

A FortiGate unit can scan for viruses on which types of network traffic? (Select all that
apply.)

Which of the following statements regarding Banned Words are correct? (Select all that

apply.)

Which statement is correct regarding virus scanning on a FortiGate unit?