Exhibit.

Refer to the exhibit, which shows a partial web fillet profile configuration.
Which action does FortiGate lake if a user attempts to access www. dropbox. com, which is categorized as File Sharing and Storage?

1. A. FortiGate allows the connection, based on the URL Filter configuration.
2. B. FortiGate blocks the connection as an invalid URL.
3. C. FortiGate exempts the connection, based on the Web Content Filter configuration.
4. D. FortiGate blocks the connection, based on the FortiGuard category based filter configuration.

Correct Answer: D

Exhibit.

Refer to the exhibit, which shows the output of a diagnose command. What can you conclude about the debug output in this scenario?

1. A. The first server provided to FortiGate when it performed a DNS query looking for a list of rating servers, was 121.111.236.179.
2. B. There is a natural correlation between the value in the FortiGuard-requests field and the value in the Weight field.
3. C. FortiGate used 64.26.151.37 as the initial server to validate its contract.
4. D. Servers with a negative TZ value are less preferred for rating requests.

Correct Answer: B

Which statement about IKEv2 is true?

1. A. Both IKEv1and IKEv2 share the feature of asymmetric authentication.
2. B. IKEv1and IKEv2 have enough of the header format in common that both versions can run over the same UDP port.
3. C. IKEv1and IKEv2 use same TCP port but run on different UDP ports.
4. D. IKEv1and IKEv2 share the concept of phase1and phase2.

Correct Answer: B

Refer to the exhibit.

Which three pieces of information does the diagnose sys top command provide? (Choose three.)

1. A. The miglogd daemon is running on CPU core ID 0.
2. B. The diagnose sys top command has been running for 18 minutes.
3. C. The miglogd daemon would be on top of the list, if the administrator pressed m on the keyboard.
4. D. The cmdbsvr process is occupying 2.4% of the total user memory space.
5. E. If the neweli daemon continues to be in the R state, it will need to be manually restarted.

Correct Answer: ABD

Exhibit.

Refer to theexhibit,which shows the output of getsystem ha status. NGFW-1 and NGFW-2 have been up for a week.
Which two statements about the output are true? (Choose two.)

1. A. If a configuration change is made to the primary FortiGate at this time, the secondary will initiate a synchronization reset.
2. B. If port 7 becomes disconnected on the secondary, both FortiGate devices will elect itself as primary.
3. C. If FGVM...649 is reboote
4. D. FGVM...650 will become the primary and retain that role, even after FGVM...649 rejoins the cluster.
5. E. If no action is taken, the primary FortiGate will leave the cluster because of the current sync status.

Correct Answer: BC