An administrator has configured the following settings: config system settings set ses-denied-traffic enable end config system global set block-session-timer 30 end What are the two results of this configuration? (Choose two.)

Which statement is correct regarding the use of application control for inspecting web applications?

Which timeout setting can be responsible for deleting SSL VPN associated sessions?

When configuring a firewall virtual wire pair policy, which following statement is true?

Which three security features require the intrusion prevention system (IPS) engine to function? (Choose three.)

Which certificate value can FortiGate use to determine the relationship between the issuer and the certificate?

An administrator has a requirement to keep an application session from timing out on port 80. What two changes can the administrator make to resolve the issue without affecting any existing services running through FortiGate? (Choose two.)

In consolidated firewall policies, IPv4 and IPv6 policies are combined in a single consolidated policy. Instead of separate policies. Which three statements are true about consolidated IPv4 and IPv6 policy configuration? (Choose three.)

An administrator has configured outgoing Interface any in a firewall policy. Which statement is true about the policy list view?

An administrator configures FortiGuard servers as DNS servers on FortiGate using default settings. What is true about the DNS connection to a FortiGuard server?

Given the security fabric topology shown in the exhibit, which two statements are true? (Choose two.)

The exhibit contains a network diagram, central SNAT policy, and IP pool configuration. The WAN (port1) interface has the IP address 10.200. 1. 1/24. The LAN (port3) interface has the IP address 10.0. 1.254/24. A firewall policy is configured to allow to destinations from LAN (port3) to WAN (port1). Central NAT is enabled, so NAT settings from matching Central SNAT policies will be applied. Which IP address will be used to source NAT the traffic, if the user on Local-Client (10.0. 1. 10) pings the IP addres

Refer to the exhibits. Exhibit

A network administrator wants to set up redundant IPsec VPN tunnels on FortiGate by using two IPsec VPN tunnels and static routes. All traffic must be routed through the primary tunnel when both tunnels are up. The secondary tunnel must be used only if the primary tunnel goes down. In addition, FortiGate should be able to detect a dead tunnel to speed up tunnel failover. Which two key configuration changes must the administrator make on FortiGate to meet the requirements? (Choose two.)

In an explicit proxy setup, where is the authentication method and database configured?

Which contains a session diagnostic output. Which statement is true about the session diagnostic output?

An administrator has configured two-factor authentication to strengthen SSL VPN access. Which additional best practice can an administrator implement?

Which two settings are required for SSL VPN to function between two FortiGate devices? (Choose two.)