Refer to the exhibit, which shows the partial output of command diagnose debug rating.

1. A. 66.117.56.37
2. B. 208.91.112.194
3. C. 209.22.147.36
4. D. 64.26.151.37

Correct Answer: D

Refer to the exhibit, which shows the partial output of a diagnose command.

Which two conclusions can you draw from the output shown in the exhibit? (Choose two.)
A. FortiGate will drop the expected traffic if it does not arrive within 23 seconds.
B. Clearing the master session has no impact on the expectation session.
C. This is a pinhole session to allow traffic for a TCP protocol that dynamically assigns TCP ports.
D. The session is checked against firewall policy ID 25.

1. A.

Correct Answer: AC

Which statement about protocol options is true?

1. A. Protocol options allow administrators to configure a maximum number of sessions for each configured protocol.
2. B. Protocol options give administrators a streamlined method to instruct FortiGate to block all sessions corresponding to disabled protocols.
3. C. Protocol options allow administrators to configure the Any setting for all enabled protocols, which provides the most efficient use of system resources.
4. D. Protocol options allow administrators to configure which Layer 4 port numbers map to upper-layer protocols, such as HTTP, SMTP, FTP, and so on.

Correct Answer: D

Refer to the exhibit, which shows a partial web filter profile configuration.

The URL www.dropbox.com is categorized as File Sharing and Storage.
Which action does FortiGate take if a user attempts to access www.dropbox.com?

1. A. FortiGate blocks the connection as an invalid URL.
2. B. Based on the URL Filter configuration, FortiGate allows the connection.
3. C. FortiGate blocks the connection, based on the FortiGuard category-based filter configuration.
4. D. Based on the Web Content filter configuration, access to www.dropbox.com would be exempted.

Correct Answer: B

Refer to the exhibit, which contains partial output from an IKE real-time debug.

The administrator does not have access to the remote gateway.
Based on the debug output, which configuration change the administrator make to the local gateway to resolve the phase 1 negotiation error?

1. A. In the phase 1 proposal configuration, add AES256-SHA256 to the list of encryption algorithms.
2. B. In the phase 1 proposal configuration, add AESCBC-SHA2 to the list of encryption algorithms.
3. C. In the phase 1 network configuration, set the IKE version to 2.
4. D. In the phase 1 proposal configuration, add AES128-SHA128 to the list of encryption algorithms.

Correct Answer: A