Which two statements are correct about a software switch on FortiGate? (Choose two.)

Which statement about video filtering on FortiGate is true?

Examine this PAC file configuration. Which of the following statements are true? (Choose two.)

Which two attributes are required on a certificate so it can be used as a CA certificate on SSL inspection? (Choose two.)

Refer to the exhibits. Exhibit A shows a network diagram. Exhibit B shows the firewall policy configuration and a VIP object configuration. The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port3) interface has the IP address 10.0.1.254/24. If the host 10.200.3.1 sends a TCP SYN packet on port 10443 to 10.200.1.10, what will the source address, destination address, and destination port of the packet be, after FortiGate forwards the packet to the destination?

Examine the intrusion prevention system (IPS) diagnostic command shown in the exhibit. If option 5 is used with the IPS diagnostic command and the outcome is a decrease in the CPU usage, what is the correct conclusion?

Which three authentication timeout types are availability for selection on FortiGate? (Choose three.)

If the Issuer and Subject values are the same in a digital certificate, which type of entity was the certificate issued to?

A network administrator enabled antivirus and selected an SSL inspection profile on a firewall policy. When downloading an EICAR test file through HTTP, FortiGate detects the virus and blocks the file. When downloading the same file through HTTPS, FortiGate does not detect the virus and does not block the file, allowing it to be downloaded. The administrator confirms that the traffic matches the configured firewall policy. What are two reasons for the failed virus detection by FortiGate? (Choose two.)

What are two functions of ZTNA? (Choose two.)