You have received an issue report about users not being able to use a video conferencing application. This application uses two UDP ports and two TCP ports to communicate with servers on the Internet. The network engineering team has confirmed there is no routing problem. You are given a copy of the FortiGate configuration .
Which three configuration objects will you inspect to ensure that no policy is blocking this traffic?
(Choose three.)

• A.config firewall policy
• B.config firewall interface-policy
• C.config firewall multicast-policy
• D.config firewall sniffer-policy
• E.config firewall DoS-policy

Comment: *

Name: *

Email: *

Verification: *

You are deploying a FortiExtender (FEX) on a ForiGate-60F. The FEX will be managed by the FortiGate. You anticipate high utilization. The requirement is to minimize the overhead on the device for WAN traffic.
Which action achieves the requirement in this scenario?

• A.Add a switch between the FortiGate and FEX.
• B.Enable CAPWAP connectivity between the FortiGate and the FortiExtender
• C.Change connectivity between the FortiGate and the FortiExtender to use VLAN Mode
• D.Add a VLAN under the FEX-WAN interface on the FortiGate

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibits.


During the implementation of a Fortinet Security Fabric configuration, CLI commands were issued in the order shown in the exhibit. On the next day, the local admin for FGTC issues the following command:

In this scenario, which outcome is true regarding the "subnet_1" firewall address object on FGTC?

• A.The object will only be automatically created on FGTC if it is modified on FGTA-1.
• B.The object needs to be recreated on FGTA-1 before it is automatically created on FGTC.
• C.The object is not automatically created.
• D.The object is automatically created.

Comment: *

Name: *

Email: *

Verification: *

A Hub FortiGate is connecting multiple branch FortiGate devices separating the traffic centrally in unique VRFs. Routing information is exchanged using BGP between the Hub and the Branch FortiGate devices.
You want to efficiently enable route leaking of specific routes between the VRFs.
Which two steps are required to achieve this requirement? (Choose two.)

• A.Enable BGP recursive routing on the HUB FortiGate
• B.Configure route-maps to leak the selected routes using BGP
• C.Create a vdom link between VRF10 and VRF12
• D.Enable Multi-VDOM mode on the Hub FortiGate and add a VDOM to connect VRF10 and VRF12

Comment: *

Name: *

Email: *

Verification: *

The wireless controller diagnostic output is shown on the exhibit.
Which three statements are true? (Choose three.)

• A.Firewall policies using device types are blocking Android devices.
• B.An access control list applied to the VAP interface blocks Android devices.
• C.This is a CAPWAP control channel diagnostic command.
• D.There are no wireless clients connected to the guest wireless network.
• E.The "src-vis" process is active on the staff wireless network VAP interface.

Comment: *

Name: *

Email: *

Verification: *