Which two statements about IPsec authentication on FortiGate are correct? (Choose two.)

• A.For a stronger authentication, you can also enable extended authentication (XAuth) to request the remote peer to provide a username and password.
• B.FortiGate supports pre-shared key and signature as authentication methods.
• C.Enabling XAuth results in a faster authentication because fewer packets are exchanged.
• D.A certificate is not required on the remote peer when you set the signature as the authentication method.

Comment: *

Name: *

Email: *

Verification: *

If Internet Service is already selected as Source in a firewall policy, which other configuration objects can be added to the Source field of a firewall policy?

• A.IP address
• B.Once Internet Service is selected, no other object can be added
• C.User or User Group
• D.FQDN address

Comment: *

Name: *

Email: *

Verification: *

What are two features of the NGFW profile-based mode? (Choose two.)

• A.NGFW profile-based mode supports applying applications and web filtering profiles in a firewall policy.
• B.NGFW profile-based mode can only be applied globally and not on individual VDOMs.
• C.NGFW profile-based mode must require the use of central source NAT policy
• D.NGFW profile-based mode policies support both flow inspection and proxy inspection.

Comment: *

Name: *

Email: *

Verification: *

Which two statements are true about the FGCP protocol? (Choose two.)

• A.Is used to discover FortiGate devices in different HA groups
• B.Not used when FortiGate is in Transparent mode
• C.Runs only over the heartbeat links
• D.Elects the primary FortiGate device

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Which algorithm does SD-WAN use to distribute traffic that does not match any of the SD-WAN rules?

• A.All traffic from a source IP to a destination IP is sent to the same interface.
• B.Traffic is sent to the link with the lowest latency.
• C.Traffic is distributed based on the number of sessions through each interface.
• D.All traffic from a source IP is sent to the same interface

Comment: *

Name: *

Email: *

Verification: *