QUESTION 35
Which of the following statements correctly describes FortiGates route lookup behavior when searching for a suitable gateway? (Choose two)

QUESTION 36
FortiGate is configured for firewall authentication. When attempting to access an external website, the user is not presented with a login prompt.
What is the most likely reason for this situation?

QUESTION 37
Which two policies must be configured to allow traffic on a policy-based next-generation firewall (NGFW) FortiGate? (Choose two.)

QUESTION 38
Which method allows management access to the FortiGate CLI without network connectivity?

QUESTION 39
Refer to the web filter raw logs.

Based on the raw logs shown in the exhibit, which statement is correct?

QUESTION 40
Refer to the exhibits.
Exhibit A.

Exhibit B.

An administrator creates a new address object on the root FortiGate (Local-FortiGate) in the security fabric. After synchronization, this object is not available on the downstream FortiGate (ISFW).
What must the administrator do to synchronize the address object?

QUESTION 41
View the exhibit.

Which two behaviors result from this full (deep) SSL configuration? (Choose two.)

QUESTION 42
Refer to the exhibit, which shows the IPS sensor configuration.

If traffic matches this IPS sensor, which two actions is the sensor expected to take? (Choose two.)

QUESTION 43
Refer to the exhibit.

Which statement about the configuration settings is true?

QUESTION 44
An administrator manages a FortiGate model that supports NTurbo.
How does NTurbo enhance performance for flow-based inspection?

QUESTION 45
Which CLI command allows administrators to troubleshoot Layer 2 issues, such as an IP address conflict?

QUESTION 46
A network administrator wants to set up redundant IPsec VPN tunnels on FortiGate by using two IPsec VPN tunnels and static routes.
All traffic must be routed through the primary tunnel when both tunnels are up. The secondary tunnel must be used only if the primary tunnel goes down. In addition, FortiGate should be able to detect a dead tunnel to speed up tunnel failover.
Which two key configuration changes must the administrator make on FortiGate to meet the requirements? (Choose two.)

QUESTION 47
Which three statements explain a flow-based antivirus profile? (Choose three.)

QUESTION 48
Refer to the exhibit, which shows a partial configuration from the remote authentication server.

Why does the FortiGate administrator need this configuration?

QUESTION 49
An administrator wants to block https://www.example.com/videos and allow all other URLs on the website.
What are two configuration changes that the administrator can make to satisfy the requirement? (Choose two.)

QUESTION 50
An administrator does not want to report the login events of service accounts to FortiGate.
What setting on the collector agent is required to achieve this?

QUESTION 51
How do you format the FortiGate flash disk?