Refer to the exhibit.

An administrator has configured a performance SLA on FortiGate, which failed to generate any traffic. Why is FortiGate not sending probes to 4.2.2.2 and 4.2.2.1 servers? (Choose two.)

1. A. The Detection Mode setting is not set to Passive.
2. B. Administrator didn't configure a gateway for the SD-WAN members, or configured gateway is not valid.
3. C. The configured participants are not SD-WAN members.
4. D. The Enable probe packets setting is not enabled.

Correct Answer: BD

Refer to the FortiGuard connection debug output.

Based on the output shown in the exhibit, which two statements are correct? (Choose two.)

1. A. A local FortiManager is one of the servers FortiGate communicates with.
2. B. One server was contacted to retrieve the contract information.
3. C. There is at least one server that lost packets consecutively.
4. D. FortiGate is using default FortiGuard communication settings.

Correct Answer: BD
FortiGate Security 7.2 Study Guide (p.287-288): "Flags: D (IP returned from DNS), I (Contract server contacted), T (being timed), F (failed)" "By default, FortiGate is configured to enforce the use of HTTPS port 443 to perform live filtering with FortiGuard or FortiManager. Other ports and protocols are available by disabling the FortiGuard anycast setting on the CLI."

Which three authentication timeout types are availability for selection on FortiGate? (Choose three.)

1. A. hard-timeout
2. B. auth-on-demand
3. C. soft-timeout
4. D. new-session
5. E. Idle-timeout

Correct Answer: ADE
https://kb.fortinet.com/kb/documentLink.do?externalID=FD37221

Refer to the exhibit.

Given the interfaces shown in the exhibit. which two statements are true? (Choose two.)

1. A. Traffic between port2 and port2-vlan1 is allowed by default.
2. B. port1-vlan10 and port2-vlan10 are part of the same broadcast domain.
3. C. port1 is a native VLAN.
4. D. port1-vlan and port2-vlan1 can be assigned in the same VDOM or to different VDOMs.

Correct Answer: CD
https://community.fortinet.com/t5/FortiGate/Technical-Tip-rules-about-VLAN-configuration-and-VDOM-interf https://kb.fortinet.com/kb/viewContent.do?externalId=FD30883

An administrator has a requirement to keep an application session from timing out on port 80. What two changes can the administrator make to resolve the issue without affecting any existing services running through FortiGate? (Choose two.)

1. A. Create a new firewall policy with the new HTTP service and place it above the existing HTTP policy.
2. B. Create a new service object for HTTP service and set the session TTL to never
3. C. Set the TTL value to never under config system-ttl
4. D. Set the session TTL on the HTTP policy to maximum

Correct Answer: BC