NO.64 Which of the following conditions must be met in order for a web browser to trust a web server certificate signed by a third-party CA?

NO.65 Which two statements are correct regarding FortiGate FSSO agentless polling mode? (Choose two.)

NO.66 View the exhibit:

Which the FortiGate handle web proxy traffic rue? (Choose two.)

NO.67 Refer to the exhibit.


The exhibit contains the configuration for an SD-WAN Performance SLA, as well as the output of diagnose sys virtual-wan-link health-check.
Which interface will be selected as an outgoing interface?

NO.68 Refer to the exhibits.


Exhibit A shows system performance output. Exhibit B shows a FortiGate configured with the default configuration of high memory usage thresholds. Based on the system performance output, which two statements are correct? (Choose two.)

NO.69 Which statement about video filtering on FortiGate is true?

NO.70 An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)

NO.71 What is the limitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?

NO.72 An administrator is running the following sniffer command:

Which three pieces of Information will be Included in me sniffer output? {Choose three.)

NO.73 Refer to the exhibit.

Which contains a session list output. Based on the information shown in the exhibit, which statement is true?

NO.74 Which statements best describe auto discovery VPN (ADVPN). (Choose two.)

NO.75 An administrator does not want to report the logon events of service accounts to FortiGate. What setting on the collector agent is required to achieve this?

NO.76 In an explicit proxy setup, where is the authentication method and database configured?

NO.77 Which three statements about a flow-based antivirus profile are correct? (Choose three.)

NO.78 Refer to the exhibit.

The exhibit shows proxy policies and proxy addresses, the authentication rule and authentication scheme, users, and firewall address.
An explicit web proxy is configured for subnet range 10.0.1.0/24 with three explicit web proxy policies.
The authentication rule is configured to authenticate HTTP requests for subnet range 10.0.1.0/24 with a form-based authentication scheme for the FortiGate local user database. Users will be prompted for authentication.
How will FortiGate process the traffic when the HTTP request comes from a machine with the source IP 10.0.1.10 to the destination http://www.fortinet.com? (Choose two.)

NO.79 Refer to the exhibit to view the firewall policy.

Which statement is correct if well-known viruses are not being blocked?

NO.80 Examine this FortiGate configuration:

Examine the output of the following debug command:

Based on the diagnostic outputs above, how is the FortiGate handling the traffic for new sessions that require inspection?

NO.81 Which of the following statements about central NAT are true? (Choose two.)

NO.82 Refer to the exhibit.

A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 fails to come up. The administrator has also re-entered the pre-shared key on both FortiGate devices to make sure they match.
Based on the phase 1 configuration and the diagram shown in the exhibit, which two configuration changes will bring phase 1 up? (Choose two.)

NO.83 Examine the two static routes shown in the exhibit, then answer the following question.

Which of the following is the expected FortiGate behavior regarding these two routes to the same destination?

NO.84 Refer to the exhibit showing a debug flow output.

Which two statements about the debug flow output are correct? (Choose two.)

NO.85 Which three authentication timeout types are availability for selection on FortiGate? (Choose three.)

NO.86 Which two statements are true about the FGCP protocol? (Choose two.)

NO.87 Refer to the exhibit to view the application control profile.

Based on the configuration, what will happen to Apple FaceTime?

NO.88 Examine the IPS sensor configuration shown in the exhibit, and then answer the question below.


An administrator has configured the WINDOWS_SERVERS IPS sensor in an attempt to determine whether the influx of HTTPS traffic is an attack attempt or not. After applying the IPS sensor, FortiGate is still not generating any IPS logs for the HTTPS traffic.
What is a possible reason for this?