You have implemented FortiGate on transparent mode as shown on the exhibit.
User1 from the Internet is trying to access the 192.168.10.10 Web servers.
Which two statements about this scenario are true? (Choose two.)

• A.User1 would be able to access the Web server intermittently.
• B.User1 would not be able to access any of the Web servers at all.
• C.FortiGate always flood packets to both Web servers at the same time.
• D.FortiGate learns Web servers MAC address when the Web servers transmit packets.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

A FortiGate is configured for a dial-up IPsec VPN to allow multiple remote FortiGate devices to connect to it. However, FortiGate A and B have problems connecting to the VPN. Only one of them can be connected at a time. If site B tries to connect while site A is connected, site A is disconnected. The IKE real-time debug shows the output in the exhibit when site A is disconnected.
Referring to the exhibit, which configuration setting should be executed in the dial-up configuration to allow both VPNs to be connected at the same time?

• A.set route-overlap allow
• B.set enforce-unique-id disable
• C.set single-source disable
• D.set add-route enable

Comment: *

Name: *

Email: *

Verification: *

What is the benefit of using FortiGate NAC LAN Segments?

• A.It provides support for multiple DHCP servers within the same VLAN
• B.It provides physical isolation without changing the IP address of hosts
• C.It provides support for IGMP snooping between hosts within the same VLAN
• D.It allows for assignment of dynamic address objects matching NAC policy

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

You are managing a FortiSwitch 3032E that is managed by FortiLink on a FortiGate 3960E. The
3032E is heavily utilized and there is only one port free.
The requirement is to add an additional three FortiSwitch 448E devices with 10Gbps SFP+ connectivity directly to the 3032E. The plan is to use split port (phy-mode) with QSFP28 mode to connect the new 448E switches.
In this scenario, which statement about the switch deployment is correct?

• A.Additional ports on Switch 1 can be split for a maximum of 128 interfaces.
• B.The port most of Switch 1 must be changed to QSFP.
• C.After enabling split ports and rebooting Switch 1, the new ports can be configured from the FortiGate.
• D.Switches 2-4 will connect successfully with Switch 1 split port in QSFP28 mode.

Comment: *

Name: *

Email: *

Verification: *

You are asked to design a secure solution using Fortinet products for a company. The company recently has Web servers that were exploited and defaced. The customer has also experienced Denial or Service due to SYN Flood attacks. Taking this into consideration, the customer's solution should have the following requirements:
- management requires network-based content filtering with man-in-the-
middle inspection
- the customer has no existing public key infrastructure but requires
centralized certificate management
- users are tracked by their active directory username without
installing any software on their hosts
- Web servers that have been exploited need to be protected from the OW ASP Top 10
- notification of high volume SYN Flood attacks when a threshold has
been triggered
Which three solutions satisfy these requirements? (Choose three.)

• A.FortiWeb
• B.FortiAuthenticator
• C.FortiCiient
• D.FortiGate
• E.FortiDDOS

Comment: *

Name: *

Email: *

Verification: *