QUESTION 46
Refer to the exhibit.

The exhibit shows the IPS sensor configuration.
If traffic matches this IPS sensor, which two actions is the sensor expected to take? (Choose two.)

QUESTION 47
Refer to the exhibits, which show the system performance output and the default configuration of high memory usage thresholds in a FortiGate.


Based on the system performance output, what can be the two possible outcomes? (Choose two.)

QUESTION 48
Refer to the exhibit.

A user located behind the FortiGate device is trying to go to http://www.addictinggames.com (Addicting.Games). The exhibit shows the application detains and application control profile.
Based on this configuration, which statement is true?

QUESTION 49
Refer to the exhibits, which show the firewall policy and an antivirus profile configuration.

Why is the user unable to receive a block replacement message when downloading an infected file for the first time?

QUESTION 50
Which three pieces of information does FortiGate use to identify the hostname of the SSL server when SSL certificate inspection is enabled? (Choose three.)

QUESTION 51
Refer to the exhibits.
Exhibit A.

Exhibit B.

An administrator creates a new address object on the root FortiGate (Local-FortiGate) in the security fabric. After synchronization, this object is not available on the downstream FortiGate (ISFW).
What must the administrator do to synchronize the address object?

QUESTION 52
Which two actions can you perform only from the root FortiGate in a Security Fabric? (Choose two.)

QUESTION 53
Refer to the exhibits.



The exhibits show a diagram of a FortiGate device connected to the network, and the firewall configuration.
An administrator created a Deny policy with default settings to deny Webserver access for Remote-User2.
The policy should work such that Remote-User1 must be able to access the Webserver while preventing Remote-User2 from accessing the Webserver.
Which two configuration changes can the administrator make to the policy to deny Webserver access for Remote-User2? (Choose two.)

QUESTION 54
Which two attributes are required on a certificate so it can be used as a CA certificate on SSL inspection? (Choose two.)

QUESTION 55
Which three pieces of information does FortiGate use to identify the hostname of the SSL server when SSL certificate inspection is enabled? (Choose three.)

QUESTION 56
Which of the following statements correctly describes FortiGates route lookup behavior when searching for a suitable gateway? (Choose two)

QUESTION 57
Refer to the exhibit to view the authentication rule configuration.

In this scenario, which statement is true?

QUESTION 58
Refer to the FortiGuard connection debug output.

Based on the output shown in the exhibit, which two statements are correct? (Choose two.)

QUESTION 59
An administrator has configured a strict RPF check on FortiGate.
How does strict RPF check work?

QUESTION 60
Which method allows management access to the FortiGate CLI without network connectivity?

QUESTION 61
Refer to the exhibit.

Which two statements are true about the routing entries in this database table? (Choose two.)

QUESTION 62
Refer to the exhibits.


The exhibits show the application sensor configuration and the Excessive-Bandwidth and Apple filter details.
Based on the configuration, what will happen to Apple FaceTime if there are only a few calls originating or incoming?

QUESTION 63
Refer to the exhibit.

Based on the ZTNA tag, the security posture of the remote endpoint has changed.
What will happen to endpoint active ZTNA sessions?

QUESTION 64
Which two configuration settings are global settings? (Choose two.)