QUESTION: 37

Examine this FortiGate configuration:

Examine the output of the following debug command:

Based on the diagnostic outputs above, how is the FortiGate handling the traffic for new sessions that require inspection?

It is allowed, but with no inspection
It is allowed and inspected as long as the inspection is flow based
It is dropped.
It is allowed and inspected, as long as the only inspection required is antivirus.

Answer(s): C

Reveal Solution Next Question

QUESTION: 38

View the exhibit.

Which of the following statements are correct? (Choose two.)

This setup requires at least two firewall policies with the action set to IPsec.
Dead peer detection must be disabled to support this type of IPsec setup.
The TunnelB route is the primary route for reaching the remote site. The TunnelA route is used only if the TunnelB VPN is down.
This is a redundant IPsec setup.

Answer(s): C,D

Reveal Solution Next Question

QUESTION: 39

An administrator has configured two-factor authentication to strengthen SSL VPN access. Which additional best practice can an administrator implement?