Exhibit.

Refer to the exhibit, which shows a FortiGate configuration.
An administrator is troubleshooting a web filter issue on FortiGate. The administrator has configured a web filter profile and applied it to a policy; however the web filter is not inspecting any traffic that is passing through the policy.
What must the administrator do to fix the issue?

1. A. Disable webfilter-force-off.
2. B. Increase webfilter-timeout.
3. C. Enable fortiguard-anycast.
4. D. Change protocol to TCP.

Correct Answer: A

An administrator wants to capture encrypted phase 2 traffic between two FotiGate devices using the built-in sniffer.
If the administrator knows that there Is no NAT device located between both FortiGate devices, which command should the administrator run?

1. A. diagnose sniffer packet any 'udp port 500'
2. B. diagnose sniffer packet any 'lp proto 50'
3. C. diagnose sniffer packet any 'udp port 4500'
4. D. diagnose sniffer packet any 'ah'

Correct Answer: B

Which statement about parallel path processing is correct (PPP)?

1. A. PPP chooses froma group of parallel options lo identity the optimal path tor processing a packet.
2. B. Only FortiGate hardware configurations affect the path that a packet takes.
3. C. PPP does not apply to packets that are part of an already established session.
4. D. Software configuration has no impact on PPP.

Correct Answer: A

Which statement aboutprotocol options is true?

1. A. Protocol options allow administrators to configure a maximum number of sessions for each configured protocol.
2. B. Protocol options give administrators a streamlined method to instruct FortiGate to block all sessions corresponding to disabled protocols.
3. C. Protocol options allow administrators to configure the Any setting for all enabled protocols, which provides the most efficient use of system resources.
4. D. Protocol options allow administrators to configure which Layer 4 port numbers map to upper-layer protocols, such as HTTP, SMTP, FTP, and so on.

Correct Answer: D

Exhibit.

Refer to the exhibit, which shows two entries that were generated in theFSSO collectoragent logs.
What three conclusions can you draw from these log entries? {Choose three.)

1. A. Remote registry is not running on the workstation.
2. B. The user's status shows as "not verified" in the collector agent.
3. C. DNS resolution is unable to resolve the workstation name.
4. D. The FortiGate firmware version is not compatible with that of the collector agent.
5. E. A firewall is blocking traffic to port 139 and 445.

Correct Answer: ABE