Refer to the exhibits.
Exhibit A

Exhibit B

Exhibit A shows the source NAT (SNAT) global setting and exhibit B shows the routing table on FortiGate.
Based on the exhibits, which two actions does FortiGate perform on existing sessions established over port2, if the administrator increases the static route priority on port2 to 20? (Choose two.)

1. A. FortiGate flags the sessions as dirty.
2. B. FortiGate continues routing the sessions with no SNAT, over port2.
3. C. FortiGate performs a route lookup for the original traffic only.
4. D. FortiGate updates the gateway information of the sessions with SNAT so that they use port1 instead of port2.

Correct Answer: BD

What are two common use cases for remote internet access (RIA)? (Choose two.)

1. A. Provide direct internet access on spokes
2. B. Provide internet access through the hub
3. C. Centralize security inspection on the hub
4. D. Provide thorough inspection on spokes

Correct Answer: BC
* B. Provide internet access through the hub: This involves routing branch or remote office internet traffic through a central hub, ensuring consistent security policies and possibly better management of network resources.
* C. Centralize security inspection on the hub: With this approach, all internet-bound traffic from various spokes is inspected at the hub, leveraging centralized security mechanisms for thorough inspection and policy enforcement.

What does enabling the exchange-interface-ip setting enable FortiGate devices to exchange?

1. A. The gateway address of their IPsec interfaces
2. B. The tunnel ID of their IPsec interfaces
3. C. The IP address of their IPsec interfaces
4. D. The name of their IPsec interfaces

Correct Answer: C

Refer to the exhibit, which shows the IPsec phase 1 configuration of a spoke.

What must you configure on the IPsec phase 1 configuration for ADVPN to work with SD- WAN?

1. A. You must set ike-version to 1.
2. B. You must enable net-device.
3. C. You must enable auto-discovery-sender.
4. D. You must disable idle-timeout.

Correct Answer: B

What are two advantages of using an IPsec recommended template to configure an IPsec tunnel in an hub-and-spoke topology? (Choose two.)

1. A. It ensures consistent settings between phase1 and phase2.
2. B. It guides the administrator to use Fortinet recommended settings.
3. C. It automatically install IPsec tunnels to every spoke when they are added to the FortiManager ADOM.
4. D. The VPN monitor tool provides additional statistics for tunnels defined with an IPsec recommended template.

Correct Answer: AB
The use of an IPsec recommended template offers the advantage of ensuring consistent settings between phase1 and phase2 (A), which is essential for the stability and security of the IPsec tunnel. Additionally, it guides the administrator to use Fortinet's recommended settings (B), which are designed to optimize performance and security based on Fortinet's best practices. References: The benefits of using IPsec recommended templates are outlined in Fortinet's SD-WAN documentation, which emphasizes the importance of consistency and adherence to recommended configurations.