Which of the following SD-WAN load balancing method use interface weight value to distribute traffic? (Choose two.)

1. A. Source IP
2. B. Spillover
3. C. Volume
4. D. Session

Correct Answer: CD
https://docs.fortinet.com/document/fortigate/6.0.0/handbook/49719/configuring-sd-wan-load-balancing

Which two statements ate true about the Security Fabric rating? (Choose two.)

1. A. It provides executive summaries of the four largest areas of security focus.
2. B. Many of the security issues can be fixed immediately by clicking Apply where available.
3. C. The Security Fabric rating must be run on the root FortiGate device in the Security Fabric.
4. D. The Security Fabric rating is a free service that comes bundled with alt FortiGate devices.

Correct Answer: BC

Refer to the exhibits.


Exhibit A shows system performance output. Exhibit B shows a FortiGate configured with the default configuration of high memory usage thresholds. Based on the system performance output, which two statements are correct? (Choose two.)

1. A. Administrators can access FortiGate only through the console port.
2. B. FortiGate has entered conserve mode.
3. C. FortiGate will start sending all files to FortiSandbox for inspection.
4. D. Administrators cannot change the configuration.

Correct Answer: BD

Which of statement is true about SSL VPN web mode?

1. A. The tunnel is up while the client is connected.
2. B. It supports a limited number of protocols.
3. C. The external network application sends data through the VPN.
4. D. It assigns a virtual IP address to the client.

Correct Answer: B
FortiGate_Security_6.4 page 575 - Web mode requires only a web browser, but supports a limited number of protocols.

Which two statements about FortiGate FSSO agentless polling mode are true? (Choose two.)

1. A. FortiGate uses the AD server as the collector agent.
2. B. FortiGate uses the SMB protocol to read the event viewer logs from the DCs.
3. C. FortiGate does not support workstation check .
4. D. FortiGate directs the collector agent to use a remote LDAP server.

Correct Answer: BC
You can deploy FSSO w/o installing an agent. FG polls the DCs directly, instead of receiving logon info indirectly from a collector agent.
Because FG collects all of the data itself, agentless polling mode requires greater system resources, and it doesn't scale as easily.
Agentless polling mode operates in a similar way to WinSecLog, but with only two event IDs: 4768 and 4769. Because there's no collector agent, FG uses the SMB protocol to read the event viewer logs from the DCs.
FG acts as a collector. It 's responsible for polling on top of its normal FSSO tasks but does not have all the extra features, such as workstation checks, that are available with the external collector agent.