Refer to the exhibits.



Based on the current HA status, an administrator updates the override and priority parameters on HQ-NGFW-1 and HQ-NGFW-2 as shown in the exhibits.
What would be the expected outcome in the HA cluster?

1. A. HQ-NGFW-2 will take over as the primary because it has the override enable setting and higher priority than HQ-NGFW-1.
2. B. HQ-NGFW-1 will remain the primary because HQ-NGFW-2 has lower priority
3. C. The HA cluster will become out of sync because the override setting must match on all HA members.
4. D. HQ-NGFW-1 will synchronize the override disable setting with HQ-NGFW-2.

Correct Answer: A

FortiGate is operating in NAT mode and has two physical interfaces connected to the LAN and DMZ networks respectively. Which two statements about the requirements of connected physical interfaces on FortiGate are true? (Choose two.)

1. A. Both interfaces must have DHCP enabled and interfaces set to LAN and DMZ roles assigned.
2. B. Both interfaces must have the interface role assigned.
3. C. Both interfaces must have directly connected routes on the routing table.
4. D. Both interfaces must have IP addresses assigned.

Correct Answer: CD

What is the primary FortiGate election process when the HA override setting is enabled? (Choose one answer)

1. A. Connected monitored ports > Priority > HA uptime > FortiGate serial number
2. B. Connected monitored ports > Priority > System uptime > FortiGate serial number
3. C. Connected monitored ports > HA uptime > Priority > FortiGate serial number
4. D. Connected monitored ports > System uptime > Priority > FortiGate serial number

Correct Answer: A

Refer to the exhibit.

An administrator has configured an Application Overrides for the ABC.Com application signature and set the Action to Allow This application control profile is then applied to a firewall policy that is scanning all outbound traffic. Logging is enabled in the firewall policy. To test the configuration, the administrator accessed the ABC.Com web site several times.
Why are there no logs generated under security logs for ABC.Com?

1. A. The ABC Com is hitting the category Excessive-Bandwidth.
2. B. The ABC.Com Type is set as Application instead of Filter.
3. C. The ABC.Com is configured under application profile, which must be configured as a web filter profile.
4. D. The ABC Com Action is set to Allow

Correct Answer: D

Refer to the exhibits.

An administrator wants to add HQ-ISFW-2 in the Security Fabric. HQ-ISFW-2 is in the same subnet as HQ-ISFW. After configuring the Security Fabric settings on HQ-ISFW-2, the status stays Pending. What can be the two possible reasons? (Choose two answers)

1. A. Upstream FortiGate IP must be set to 10.0.11.254.
2. B. SAML Single Sign-On must be set to Manual.
3. C. HQ-ISFW-2 must be authorized on HQ-ISFW.
4. D. Management IP must be set to 10.0.13.254.

Correct Answer: AC