A network administrator is reviewing firewall policies in both Interface Pair View and By Sequence View. The policies appear in a different order in each view. Why is the policy order different in these two views?

1. A. By Sequence View groups policies based on rule priority, while Interface Pair View always follows the order of traffic logs.
2. B. The firewall dynamically reorders policies in Interface Pair View based on recent traffic patterns, but By Sequence View remains static.
3. C. Interface Pair View sorts policies based on matching interfaces, while By Sequence View shows the actual processing order of rules.
4. D. Policies in Interface Pair View are prioritized by security levels, while By Sequence View strictly follows the administrator's manual ordering.

Correct Answer: C

Refer to the exhibit.
A routing table is shown

An administrator wants to create a new static route so the traffic to the subnet 172.20.1.0/24 is routed through port2 only. What are the two criteria that the administrator can use to achieve this objective? (Choose two.)

1. A. The new static route must have the priority set to 3.
2. B. The new static route must have the metric set to 1.
3. C. The existing static route through port3 must have the distance set to 11.
4. D. The new static route must have the distance set to 9

Correct Answer: CD

Refer to the exhibit.

Which two statements about the FortiGuard connection are true? (Choose two.)

1. A. The weight increases as the number of failed packets rises
2. B. You can configure unreliable protocols to communicate with FortiGuard Server.
3. C. FortiGate identified the FortiGuard Server using DNS lookup.
4. D. FortiGate is using the default port for FortiGuard communication.

Correct Answer: AD

A new administrator is configuring FSSO authentication on FortiGate using DC Agent Mode. Which step is not part of the expected process?

1. A. The DC agent sends login event data directly to FortiGate.
2. B. FortiGate determines user identity based on the IP address in the FSSO list.
3. C. The collector agent forwards login event data to FortiGate.
4. D. The user logs into the windows domain.

Correct Answer: A

Refer to the exhibit.

An SD-WAN zone configuration on the FortiGate GUI is shown. Based on the exhibit, which statement is true?

1. A. The Underlay zone contains no member.
2. B. The virtual-wan-link and overlay zones can be deleted
3. C. The Underlay zone is the zone by default.
4. D. port2 and port3 are not assigned to a zone.

Correct Answer: A