QUESTION: 5

Refer to the exhibit.

The exhibit contains a network diagram, virtual IP, IP pool, and firewall policies configuration. The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port3) interface has the IP address 10 .0.1.254. /24. The first firewall policy has NAT enabled using IP Pool. The second firewall policy is configured with a VIP as the destination address.
Which IP address will be used to source NAT the internet traffic coming from a workstation with the IP address 10.0.1.10?

10.200.1.1
10.200.3.1
10.200.1.100
10.200.1.10

Answer(s): A

Reference:

https://help.fortinet.com/fos60hlp/60/Content/FortiOS/fortigate-firewall/Concepts%20- %20Firewall/Static%20NAT.htm

Reveal Solution Next Question

QUESTION: 6

Refer to the exhibits to view the firewall policy (Exhibit A) and the antivirus profile (Exhibit B).

Which statement is correct if a user is unable to receive a block replacement message when downloading an infected file for the first time?

The firewall policy performs the full content inspection on the file.
The flow-based inspection is used, which resets the last packet to the user.
The volume of traffic being inspected is too high for this model of FortiGate.
The intrusion prevention security profile needs to be enabled when using flow-based inspection mode.

Answer(s): B

Reveal Solution Next Question

QUESTION: 7

Which two statements about antivirus scanning mode are true? (Choose two.)

In proxy-based inspection mode, files bigger than the buffer size are scanned.
In flow-based inspection mode, FortiGate buffers the file, but also simultaneously transmits it to the client.
In proxy-based inspection mode, antivirus scanning buffers the whole file for scanning, before sending it to the client.
In flow-based inspection mode, files bigger than the buffer size are scanned.

Answer(s): B,C

Reveal Solution Next Question