NO.100 A network administrator has enabled SSL certificate inspection and antivirus on FortiGate. When downloading an EICAR test file through HTTP, FortiGate detects the virus and blocks the file. When downloading the same file through HTTPS, FortiGate does not detect the virus and the file can be downloaded.
What is the reason for the failed virus detection by FortiGate?

NO.101 Why does FortiGate keep TCP sessions in the session table for some seconds even after both sides (client and server) have terminated the session?

NO.102 Refer to the exhibits.
The exhibits show the firewall policies and the objects used in the firewall policies.
The administrator is using the Policy Lookup feature and has entered the search criteria shown in the exhibit.

Which policy will be highlighted, based on the input criteria?

NO.103 Which feature in the Security Fabric takes one or more actions based on event triggers?

NO.104 Refer to the exhibits.


The SSL VPN connection fails when a user attempts to connect to it. What should the user do to successfully connect to SSL VPN?

NO.105 Which two statements are true about the FGCP protocol? (Choose two.)

NO.106 Refer to the exhibits.
Exhibit A shows a topology for a FortiGate HA cluster that performs proxy-based inspection on traffic. Exhibit B shows the HA configuration and the partial output of the get system ha status command.


Based on the exhibits, which two statements about the traffic passing through the cluster are true? (Choose two.)

NO.107 Which of the following statements about backing up logs from the CLI and downloading logs from the GUI are true? (Choose two.)

NO.108 Which CLI command allows administrators to troubleshoot Layer 2 issues, such as an IP address conflict?

NO.109 Which statement correctly describes the use of reliable logging on FortiGate?

NO.110 Refer to the exhibit.

Given the interfaces shown in the exhibit. which two statements are true? (Choose two.)

NO.111 Which two statements are correct regarding FortiGate FSSO agentless polling mode? (Choose two.)

NO.112 An administrator needs to configure VPN user access for multiple sites using the same soft FortiToken. Each site has a FortiGate VPN gateway. What must an administrator do to achieve this objective?

NO.113 How can you disable RPF checking?

NO.114 An employee needs to connect to the office through a high-latency internet connection.
Which SSL VPN setting should the administrator adjust to prevent SSL VPN negotiation failure?

NO.115 Which statement about the deployment of the Security Fabric in a multi-VDOM environment is true?