Examine the exhibit, which contains a virtual IP and firewall policy configuration. The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port2) interface has the IP address 10.0.1.254/24. The first firewall policy has NAT enabled on the outgoing interface address. The second firewall policy is configured with a VIP as the destination address. Which IP address will be used to source NAT the Internet traffic coming from a workstation with the IP address 10.0.1.10/24?

Examine the FortiGate configuration: What will happen to unauthenticated users when an active authentication policy is followed by a fall through policy without authentication?

An administrator has configured the following settings: What does the configuration do? (Choose two.)

Which of the following statements about the FSSO collector agent timers is true?

A team manager has decided that while some members of the team need access to particular website, the majority of the team does not. Which configuration option is the most effective option to support this request?

Which of the following features is supported by web filter in flow-based inspection mode with NGFW mode set to profile-based?

How does FortiGate verify the login credentials of a remote LDAP user?

Which of the following statements is true regarding SSL VPN settings for an SSL VPN portal?

When using WPAD DNS method, which FQDN format do browsers use to query the DNS server?

Which of the following statements about backing up logs from the CLI and downloading logs from the GUI are true? (Choose two.)

Examine the network diagram shown in the exhibit, and then answer the following question: A firewall administrator must configure equal cost multipath (ECMP) routing on FGT1 to ensure both port1 and port3 links are used at the same time for all traffic destined for 172.20.2.0/24. Which of the following static routes will satisfy this requirement on FGT1? (Choose two.)

An administrator needs to create an SSL-VPN connection for accessing an internal server using the bookmark Port Forward. What step is required for this configuration?

An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)

Examine the exhibit, which shows the output of a web filtering real time debug. Why is the site www.bing.com being blocked?

Which of the following statements about policy-based IPsec tunnels are true? (Choose two.)

Examine this FortiGate configuration: Examine the output of the following debug command: Based on the diagnostic outputs above, how is the FortiGate handling the traffic for new sessions that require inspection?

HTTP Public Key Pinning (HPKP) can be an obstacle to implementing full SSL inspection. What solutions could resolve this problem? (Choose two.)

Examine the routing database shown in the exhibit, and then answer the following question: Which of the following statements are correct? (Choose two.)

In an HA cluster operating in active-active mode, which path is taken by the SYN packet of an HTTP session that is offloaded to a secondary FortiGate?

A team manager has decided that, while some members of the team need access to a particular website, the majority of the team does not. Which configuration option is the most effective way to support this request?

If traffic matches a DLP filter with the action set to Quarantine IP Address, what action does FortiGate take?

Examine the exhibit, which shows the partial output of an IKE real-time debug. Which of the following statement about the output is true?

Examine the exhibit, which contains a session diagnostic output. Which of the following statements about the session diagnostic output is true?

Which statements are true regarding firewall policy NAT using the outgoing interface IP address with fixed port disabled? (Choose two.)

Which statements best describe auto discovery VPN (ADVPN). (Choose two.)

Which of the following statements are true when using WPAD with the DHCP discovery method? (Choose two.)