Refer to the exhibit.

Examine the intrusion prevention system (IPS) diagnostic command shown in the exhibit.
If option 5 is used with the IPS diagnostic command and the outcome is a decrease in the CPU usage, what is the correct conclusion?

• A.The IPS engine is blocking all traffic.
• B.The IPS engine is inspecting a high volume of traffic.
• C.The IPS engine is unable to prevent an intrusion attack.
• D.The IPS engine will continue to run in a normal state.

Comment: *

Name: *

Email: *

Verification: *

The HTTP inspection process in web filtering follows a specific order when multiple features are enabled in the web filter profile.
Which order must FortiGate use when the web filter profile has features such as safe search enabled?

• A.FortiGuard category filter and rating filter
• B.Static domain filter, SSL inspection filter, and external connectors filters
• C.DNS-based web filter and proxy-based web filter
• D.Static URL filter, FortiGuard category filter, and advanced filters

Comment: *

Name: *

Email: *

Verification: *

In which two ways can RPF checking be disabled? (Choose two.)

• A.Enable anti-replay in firewall policy.
• B.Enable asymmetric routing.
• C.Disable strict-src-check under system settings.
• D.Disable the RPF check at the FortiGate interface level for the source check.

Comment: *

Name: *

Email: *

Verification: *

Examine the output from a debug flow:

Why did the FortiGate drop the packet?

• A.The next-hop IP address is unreachable.
• B.It failed the RPF check.
• C.It matched an explicitly configured firewall policy with the action DENY.
• D.It matched the default implicit firewall policy.

Comment: *

Name: *

Email: *

Verification: *

To complete the final step of a Security Fabric configuration, an administrator must authorize all the devices on which device?

• A.FortiManager
• B.Root FortiGate
• C.FortiAnalyzer
• D.Downstream FortiGate

Comment: *

Name: *

Email: *

Verification: *