QUESTION: 89

When does the FortiGate enter into fail-open session mode? Response:

When CPU usage goes above the red threshold.
When a proxy (for proxy-based inspection) runs out of connections.
When memory usage goes above the red threshold.
When memory usage goes above the extreme threshold.

Answer(s): B

Reveal Solution Next Question

QUESTION: 90

Which statement is true about split tunneling in SSL VPN? Response:

It is supported in web-only mode.
It can be enabled by the SSL VPN user, after connecting to the SSL VPN.
If enabled, Internet traffic uses the local gateway of the connecting host.
If disabled, SSL VPN users must authenticate using FortiToken.

Answer(s): C

Reveal Solution Next Question

QUESTION: 91

LDAP and RADIUS are both remote authentication servers that FortiGate can tie into for authentication.
What is a key difference between these servers? Response:

Only LDAP can have a secure connection with FortiGate using a server certificate.
Only LDAP can be configured to authenticate groups as defined on the LDAP server.
Only LDAP provides authentication, authorization, and accounting (AAA) services.
Only RADIUS requires a distinguished name (i h.) to locate user records.

Answer(s): A

Reveal Solution Next Question