An administrator must disable RPF check to investigate an issue.
Which method is best suited to disable RPF without affecting features like antivirus and intrusion prevention system?

• A.Enable asymmetric routing, so the RPF check will be bypassed.
• B.Disable the RPF check at the FortiGate interface level for the source check.
• C.Disable the RPF check at the FortiGate interface level for the reply check.
• D.Enable asymmetric routing at the interface level.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

The Root and To_Internet VDOMs are configured in NAT mode. The DMZ and Local VDOMs are configured in transparent mode.
The Root VDOM is the management VDOM. The To_Internet VDOM allows LAN users to access the internet. The To_Internet VDOM is the only VDOM with internet access and is directly connected to ISP modem.
With this configuration, which statement is true?

• A.Inter-VDOM links are required to allow traffic between the Local and Root VDOMs.
• B.A default static route is not required on the To_Internet VDOM to allow LAN users to access the internet.
• C.Inter-VDOM links are required to allow traffic between the Local and DMZ VDOMs.
• D.Inter-VDOM links are not required between the Root and To_Internet VDOMs because the Root VDOM is used only as a management VDOM.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Which statement about this firewall policy list is true?

• A.The Implicit group can include more than one deny firewall policy.
• B.The firewall policies are listed by ID sequence view.
• C.The firewall policies are listed by ingress and egress interfaces pairing view.
• D.LAN to WAN. WAN to LAN. and Implicit are sequence grouping view lists.

Comment: *

Name: *

Email: *

Verification: *

An administrator configured the antivirus profile in a firewall policy set to flow-based inspection mode.
While testing the configuration, the administrator noticed that eicar.com test files can be downloaded using HTTPS protocol only.
What is causing this issue?

• A.Hardware acceleration is in use.
• B.The test file is larger than the oversize limit.
• C.HTTPS protocol is not enabled under Inspected Protocols.
• D.Full SSL inspection is disabled.

Comment: *

Name: *

Email: *

Verification: *

Which two statements about advanced AD access mode for the FSSO collector, agent are true?
(Choose two.)

• A.FortiGate can act as an LDAP client to configure the group filters.
• B.It uses the Windows convention for naming; that is, Domain\Username.
• C.It supports monitoring of nested groups.
• D.It is only supported if DC agents are deployed.

Comment: *

Name: *

Email: *

Verification: *