Which two statements are true about the FGCP protocol? (Choose two.)

• A.FGCP is not used when FortiGate is in transparent mode
• B.FGCP elects the primary FortiGate device
• C.FGCP is used to discover FortiGate devices in different HA groups
• D.FGCP runs only over the heartbeat links

Comment: *

Name: *

Email: *

Verification: *

An administrator must enable a DHCP server on one of the directly connected networks on FortiGate. However, the administrator is unable to complete the process on the GUI to enable the service on the interface.
In this scenario, what prevents the administrator from enabling DHCP service?

• A.The role of the interface prevents setting a DHCP server.
• B.The DHCP server setting is available only on the CLI.
• C.Another interface is configured as the only DHCP server on FortiGate.
• D.The FortiGate model does not support the DHCP server.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibits.



FGT-1 and FGT-2 are updated with HA configuration commands shown in the exhibit.
What would be the expected outcome in the HA cluster?

• A.FGT-1 will remain the primary because FGT-2 has lower priority.
• B.FGT-2 will take over as the primary because it has the override enable setting and higher priority than FGT-1.
• C.FGT-1 will synchronize the override disable setting with FGT-2.
• D.The HA cluster will become out of sync because the override setting must match on all HA members.

Comment: *

Name: *

Email: *

Verification: *

Which engine handles application control traffic on the next-generation firewall (NGFW) FortiGate?

• A.Antivirus engine
• B.Intrusion prevention system engine
• C.Flow engine
• D.Detection engine

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibits.



The exhibits show a diagram of a FortiGate device connected to the network, as well as the IP pool configuration and firewall policy objects.
The WAN (port1) interface has the IP address10.200.1.1/24. The LAN (port3) interface has the IPaddress10.
0.1.254/24.
Which IP address will be used to source NAT (SNAT) the traffic, if the user on Local-Client (10.0.1.10) pings the IP address of Remote-FortiGate (10.200.3.1)?

• A.10.200.1.1
• B.10.200.1.49
• C.10.200.1.99
• D.10.200.1.149

Comment: *

Name: *

Email: *

Verification: *