Refer to the exhibit.

You are working on FortiGate 61E operating in flow-based inspection mode with various settings optimized for performance. The main Internet firewall policy is using the "default" antivirus profile.
You found that some executable virus samples files downloaded over HTTP are not being blocked by the FortiGate.
Referring to the exhibit, how can this be fixed?

• A.Add set content-disarm enable to the configuration.
• B.Change the set scan-mode configuration to full.
• C.Disable the emulator feature.
• D.Change the set default-db configuration to extreme.

Comment: *

Name: *

Email: *

Verification: *

The dashboard widget indicates that FortiGuard Web Filtering is not reachable. However, AntiVirus, IPS, and Application Control have no problems as shown in the exhibit.

You contacted Fortinet's customer service and discovered that your Fortiguard Web Filtering contract is still valid for several months.
What are two reasons for this problem? (Choose two.)

• A.You have another security device in front of FortiGate blocking ports 8888 and 53.
• B.FortiGuard Web Filtering is not enabled in any firewall policy.
• C.You did not enable Web Filtering cache under Web Filtering and E-mail Filtering Options.
• D.You have a firewall policy blocking ports 8888 and 53.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit. You have deployed a security fabric with three FortiGate devices as shown in the exhibit.

FGT_2 has the following configuration:

FGT_1 and FGT_3 are configured with the default setting.
Which statement is true for the synchronization of fabric-objects?

• A.Objects from the root FortiGate will not be synchronized to any downstream FortiGate
• B.Objects from the FortiGate FGT_2 will be synchronized to the upstream FortiGate
• C.Objects from the root FortiGate will only be synchronized to FGT_2
• D.Objects from the root FortiGate will only be synchronized to FGT_3

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit, which shows a multi-region SD-WAN architecture.

Given this scenario, which two statements are true? (Choose two.)

• A.If iBGP is used, cross-regional spoke-to-hub shortcuts can be established.
• B.If eBGP is used, ADVPN can be established for branch-to-branch traffic across regions.
• C.If eBGP is used, ADVPN can be established only for branch-to-branch traffic within each region.
• D.If iBGP is used, cross-regional spoke-to-hub shortcuts cannot be used.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

• A.LAG-1 and LAG-2 should be connected to a single 4-port 802.3ad interface on the FortiGate-A.
• B.port13 and port14 on FS448D-A should be connected to port13 and port14 on FS448D-B.
• C.LAG-3 on switches on FS448D-A and FS448D-B may be connected to a single 802.3ad trunk on another device.
• D.LAG-1 and LAG-2 should be connected to a 4-port single 802.3ad trunk on another device.

Comment: *

Name: *

Email: *

Verification: *