Q57. Which of the following statements about backing up logs from the CLI and downloading logs from the GUI are true? (Choose two.)

Q58. Which process is involved in updating IPS from FortiGuard?

Q59. Refer to the exhibit.

The exhibits show a network diagram and the explicit web proxy configuration.
In the command diagnose sniffer packet, what filter can you use to capture the traffic between the client and the explicit web proxy?

Q60. Which statement best describes the role of a DC agent in an FSSO DC agent mode solution?
Response:

Q61. Examine the following web filtering log.

Which statement about the log message is true?

Q62. An administrator is configuring an antivirus profiles on FortiGate and notices that Proxy Options is not listed under Security Profiles on the GUI. What can cause this issue?

Q63. Examine the IPS sensor and DoS policy configuration shown in the exhibit, then answer the question below.

When detecting attacks, which anomaly, signature, or filter will FortiGate evaluate first?

Q64. Examine this output from a debug flow:

Why did the FortiGate drop the packet?

Q65. By default, when logging to disk, when does FortiGate delete logs?

Q66. Refer to the following exhibit.



Why is FortiGate not blocking the test file over FTP download?

Q67. Examine this FortiGate configuration:

How does the FortiGate handle web proxy traffic coming from the IP address 10.2.1.200 that requires authorization?

Q68. Examine the exhibit, which shows the partial output of an IKE real-time debug.

Which of the following statement about the output is true?

Q69. What settings must you configure to ensure FortiGate generates logs for web filter activity on a firewall policy called Full Access? (Choose two.)

Q70. Refer to the exhibit.

An administrator is investigating a report of users having intermittent issues with browsing the web. The administrator ran diagnostics and received the output shown in the exhibit.
Which option is the most likely cause of the issue?

Q71. What FortiGate components are tested during the hardware test? (Choose three.)

Q72. Examine the network diagram shown in the exhibit, then answer the following question:

Which one of the following routes is the best candidate route for FGT1 to route traffic from the Workstation to the Web server?

Q73. When override is enabled, which option shows the process and selection criteria that is used to elect the primary FortiGate in an HA cluster?

Q74. Refer to the exhibit.

The exhibit shows two static routes.
Which option accurately describes how FortiGate will handle these two routes to the same destination?

Q75. Refer to the exhibit.

A firewall administrator must configure equal cost multipath (ECMP) routing on FGT1 to ensure both port1 and port3 links are used, at the same time, for all traffic destined for 172.20.2.0/24.
Given the network diagram shown in the exhibit, which two static routes will satisfy this requirement on FGT1?
(Choose two.)

Q76. View the following exhibit, which shows the firewall policies and the object uses in the firewall policies.


The administrator is using the Policy Lookup feature and has entered the search create shown in the following exhibit.

Which of the following will be highlighted based on the input criteria?