You are asked to add a FortiDDoS to the network to combat detected slow connection attacks such as Slowloris.
Which prevention mode on FortiDDoS will protect you against this specific type of attack?

• A.rate limiting mode
• B.aggressive aging mode
• C.blocking mode
• D.asymmetric mode

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

You log into FortiManager, access the Device Manager window and notice that one of the managed devices is not in normal status.
Referring to the exhibit, which two statements correctly describe the status and result of the affected device? (Choose two.)

• A.The changed configuration on the FortiGate will be overwritten in favor of what is on the FortiManager the next time that the device configuration is pushed.
• B.The device configuration was changed on both the local FortiGate side and the FortiManager side; auto-update is disabled.
• C.The device configuration was changed on the local FortiGate side only; auto-update is disabled.
• D.The changed configuration on the FortiGate will remain the next time that the device configuration is pushed from FortiManager.

Comment: *

Name: *

Email: *

Verification: *

A customer wants to install a FortiSandbox device to identify suspicious files received by an e- mail server. All the incoming e-mail traffic to the e-mail server uses the SMTPS protocol.
Which three solutions would be implemented? (Choose three.)

• A.FortiMail device in gateway mode using the built-in MTA and sending the suspicious files to the FortiSandbox
• B.FortiGate device in transparent mode sending the suspicious files to the FortiSandbox
• C.FortiGate device in NAT mode sending the suspicious files to the FortiSandbox
• D.FortiMail device in transparent mode acting as an SMTP proxy sending the suspicious files to the FortiSandbox
• E.FortiSandbox in sniffer input mode

Comment: *

Name: *

Email: *

Verification: *

A remote worker requests access to an SSH server inside the network. You deployed a ZTNA Rule to their FortiClient. You need to follow the security requirements to inspect this traffic.
Which two statements are true regarding the requirements? (Choose two.)

• A.FortiGate can perform SSH access proxy host-key validation.
• B.You need to configure a FortiClient SSL-VPN tunnel to inspect the SSH traffic.
• C.SSH traffic is tunneled between the client and the access proxy over HTTPS.
• D.Traffic is discarded as ZTNA does not support SSH connection rules.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

You have two data centers with a FortiGate 7000-series chassis connected by VPN. All traffic flows over an established generic routing encapsulation (GRE) tunnel between them. You are troubleshooting traffic that is traversing between Server VLAN A and Server VLAN B. The performance is lower than expected and you notice all traffic is only going through the FPM in slot
3 while nothing through the FPM in slot 4.
Referring to the exhibit, which statement is true?

• A.There is no way to load-balance the traffic in this scenario.
• B.Changing the algorithm to take source IP, destination IP and port into account will load balance this traffic to the other module.
• C.Configuring a load-balance flow-rule in the CLI will load-balance this traffic.
• D.Removing traffic shaping from the firewall policy allowing this traffic will allow for load-balancing to the other module.

Comment: *

Name: *

Email: *

Verification: *