Anti-Virus Real-Time Protection is enabled without any exclusions.
Referring to the exhibit, which two behaviors will the FortiClient endpoint have after receiving the profile update from the FortiClient EMS? (Choose two.)

• A.The user will not be able to access a downloaded file for a maximum of 60 seconds if it is not a virus and the FortiSandbox is reachable.
• B.If the Real-Time Protection does not detect a virus, the user will be able to access a downloaded file when the FortiSandbox is unreachable.
• C.Files executed from a mapped network drive will not be inspected by the FortiClient endpoint AntiVirus engine.
• D.Access to a downloaded file will always be allowed after 60 seconds when the FortiSandbox is reachable.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

You have installed a FortiSandbox and configured it in your FortiMail.
Referring to the exhibit, which two statements are correct? (Choose two.)

• A.If FortiMail is not able to obtain the results from the FortiGuard queries, URIs will not be checked by the FortiSandbox.
• B.If the FortiSandbox with IP 10.10.10.3 is not available, the e-mail will be checked by the FortiCloud Sandbox.
• C.FortiMail will cache the results for 30 minutes
• D.FortiMail will wait up to 30 minutes to obtain the scan results.

Comment: *

Name: *

Email: *

Verification: *

You configured a firewall policy with only a Web filter profile for accessing the Internet. Access to websites belonging to the "Information Technology" category are blocked and to the "Business" category are allowed. SSL deep inspection is not enabled on this policy.
A user wants to access the website https://www.it-acme.com which presents a certificate with CN=www.acme.com. The it-acme.com domain is categorized as "Information Technology" and the acme.com domain is categorized as "Business".
Which statement regarding this scenario is correct?

• A.Only with SSL deep inspection enabled will the FortiGate be able to categorized this website.
• B.The FortiGate is able to read the URL within HTTPS sessions when using SSL certificate inspection so the website will be blocked by the "Information Technology".
• C.The website will be blocked by category "Information Technology" as the SNI takes precedence over the certificate name.
• D.The website will be allowed by category "Business" as the certificate name takes precedence over the URL.

Comment: *

Name: *

Email: *

Verification: *

A customer wants to integrate their on-premise FortiGate with their Azure infrastructure.
Which two components must be in place to configure the Azure Fabric connector? (Choose two.)

• A.An outbound policy from the Azure FortiGate-VM virtual appliance.
• B.An inbound policy from the Azure FortiGate-VM virtual appliance.
• C.FortiGate-VM virtual appliance deployed on-premise.
• D.A FortiGate-VM virtual appliance deployed in Azure.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

The Company Corp administrator has enabled Workflow mode in FortiManager and has assigned approval roles to the current administrators. However, workflow approval does not function as expected. The CTO is currently unable to approve submitted changes. Given the exhibit, which two possible solutions will resolve the workflow approval problems with the Workflow_72 ADOM?
(Choose two.)

• A.The CTO must have a defined email address for their admin user account.
• B.The CTO and CISO need to swap Approval Groups so that the highest authority is in Group #1.
• C.The CTO must have Standard access level or higher for FortiManager.
• D.The CISO must have a higher access level than "Read_Only_User" in FortiManager.
• E.The CTO needs to be added to "Email Notification" in the Workflow_72 ADOM.

Comment: *

Name: *

Email: *

Verification: *