- (Exam Topic 2) How do you format the FortiGate flash disk?

- (Exam Topic 2) A team manager has decided that, while some members of the team need access to a particular website, the majority of the team does not Which configuration option is the most effective way to support this request?

- (Exam Topic 1) Which two statements are true about the FGCP protocol? (Choose two.)

- (Exam Topic 2) In which two ways can RPF checking be disabled? (Choose two )

- (Exam Topic 1) Given the security fabric topology shown in the exhibit, which two statements are true? (Choose two.)

- (Exam Topic 1) The exhibit contains the configuration for an SD-WAN Performance SLA, as well as the output of diagnose sys virtual-wan-link health-check. Which interface will be selected as an outgoing interface?

- (Exam Topic 2) Which two statements are correct regarding FortiGate HA cluster virtual IP addresses? (Choose two.)

- (Exam Topic 2) Which CLI command will display sessions both from client to the proxy and from the proxy to the servers?

- (Exam Topic 1) Which statement correctly describes NetAPI polling mode for the FSSO collector agent?

- (Exam Topic 1) FortiGuard categories can be overridden and defined in different categories. To create a web rating override for example.com home page, the override must be configured using a specific syntax. Which two syntaxes are correct to configure web rating for the home page? (Choose two.)

- (Exam Topic 1) An administrator is running a sniffer command as shown in the exhibit. Which three pieces of information are included in the sniffer output? (Choose three.)

- (Exam Topic 2) The exhibit contains a network diagram, central SNAT policy, and IP pool configuration. The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port3) interface has the IP address 10.0.1.254/24. A firewall policy is configured to allow to destinations from LAN (port3) to WAN (port1). Central NAT is enabled, so NAT settings from matching Central SNAT policies will be applied. Which IP address will be used to source NAT the traffic, if the user on Local-Client (10.0.1.10) pings t

- (Exam Topic 1) A network administrator wants to set up redundant IPsec VPN tunnels on FortiGate by using two IPsec VPN tunnels and static routes. * All traffic must be routed through the primary tunnel when both tunnels are up * The secondary tunnel must be used only if the primary tunnel goes down * In addition, FortiGate should be able to detect a dead tunnel to speed up tunnel failover Which two key configuration changes are needed on FortiGate to meet the design requirements? (Choose two,)

- (Exam Topic 2) View the exhibit. Which of the following statements are correct? (Choose two.)

- (Exam Topic 1) Which CLI command allows administrators to troubleshoot Layer 2 issues, such as an IP address conflict?

- (Exam Topic 1) Refer to the web filter raw logs. Based on the raw logs shown in the exhibit, which statement is correct?

- (Exam Topic 2) When a firewall policy is created, which attribute is added to the policy to support recording logs to a FortiAnalyzer or a FortiManager and improves functionality when a FortiGate is integrated with these devices?

- (Exam Topic 1) An administrator does not want to report the logon events of service accounts to FortiGate. What setting on the collector agent is required to achieve this?