Refer to the exhibit, which shows a partial enterprise network.

An administrator would like the area 0.0.0.0 to detect the external network. What must the administrator configure?

1. A. Enable RIP redistribution on FortiGate B.
2. B. Configure a distribute-route-map-in on FortiGate B.
3. C. Configure a virtual link between FortiGate A and B.
4. D. Set the area 0.0.0.l type to stub on FortiGate A and B.

Correct Answer: A

Refer to the exhibit, which shows the FortiGuard Distribution Network of a FortiGate device. FortiGuard Distribution Network on FortiGate

An administrator is trying to find the web filter database signature on FortiGate to resolve issues with websites not being filtered correctly in a flow-mode web filter profile.
Why is the web filter database version not visible on the GUI, such as with IPS definitions?

1. A. The web filter database is stored locally, but the administrator must run over CLI diagnose autoupdate versions.
2. B. The web filter database is stored locally on FortiGate, but it is hidden behind the GU
3. C. It requires enabling debug mode to make it visible.
4. D. The web filter database is not hosted on FortiGate: FortiGate queries FortiGuard or FortiManager for web filter ratings on demand.
5. E. The web filter database is only accessible after manual syncing with a valid FDS server using diagnose test update info.

Correct Answer: C

What action can be taken on a FortiGate to block traffic using IPS protocol decoders, focusing on network transmission patterns and application signatures?

1. A. Use the DNS filter to block application signatures and protocol decoders.
2. B. Use application control to limit non-URL-based software handling.
3. C. Enable application detection-based SD-WAN rules.
4. D. Configure a web filter profile in flow mode.

Correct Answer: B

Which two statements about IKEv2 are true if an administrator decides to implement IKEv2 in the VPN topology? (Choose two.)

1. A. It includes stronger Diffie-Hellman (DH) groups, such as Elliptic Curve (ECP) groups.
2. B. It supports interoperability with devices using IKEv1.
3. C. It exchanges a minimum of two messages to establish a secure tunnel.
4. D. It supports the extensible authentication protocol (EAP).

Correct Answer: AD

Refer to the exhibit, which contains the partial output of an OSPF command.

An administrator is checking the OSPF status of a FortiGate device and receives the output shown in the exhibit.
What two conclusions can the administrator draw? (Choose two.)

1. A. The FortiGate device is a backup designated router
2. B. The FortiGate device is connected to multiple areas
3. C. The FortiGate device injects external routing information
4. D. The FortiGate device has OSPF ECMP enabled

Correct Answer: BC