In an IPSec gateway-to-gateway configuration, two FortiGate units create a VPN tunnel between two separate private networks.

Which of the following configuration steps must be performed on both FortiGate units to support this configuration? (Select all that apply.)

A. Create firewall policies to control traffic between the IP source and destination address.

B. Configure the appropriate user groups on the FortiGate units to allow users access to the IPSec VPN connection.

C. Set the operating mode of the FortiGate unit to IPSec VPN mode.

D. Define the Phase 2 parameters that the FortiGate unit needs to create a VPN tunnel with the remote peer.

E. Define the Phase 1 parameters that the FortiGate unit needs to authenticate the remote peers.

Which of the following statements are correct regarding URL filtering on the FortiGate unit? (Select all that apply.)

A. The allowed actions for URL Filtering include Allow, Block and Exempt.

B. The allowed actions for URL Filtering are Allow and Block.

C. The FortiGate unit can filter URLs based on patterns using text and regular expressions.

D. Any URL accessible by a web browser can be blocked using URL Filtering.

E. Multiple URL Filter lists can be added to a single protection profile.

What is the effect of using CLI "config system session-ttl" to set session_ttl to 1800 seconds?

A. Sessions can be idle for no more than 1800 seconds.

B. The maximum length of time a session can be open is 1800 seconds.

C. After 1800 seconds, the end user must reauthenticate.

D. After a session has been open for 1800 seconds, the FortiGate unit will send a keepalive packet to both client and server.

Which of the following products is designed to manage multiple FortiGate devices?

A. FortiGate device

B. FortiAnalyzer device

C. FortiClient device

D. FortiManager device

E. FortiMail device

F. FortiBridge device

Which of the following logging options are supported on a FortiGate unit? (Select all that apply.)

A. LDAP

B. Syslog

C. FortiAnalyzer

D. Local disk and/or memory

In order to match an identity-based policy, the FortiGate unit checks the IP information. Once inside the policy, the following logic is followed:

A. First, a check is performed to determine if the user's login credentials are valid. Next, the user is checked to determine if they belong to any of the groups defined for that policy. Finally, user restrictions are determined and port, time, and UTM profiles are applied.

B. First, user restrictions are determined and port, time, and UTM profiles are applied. Next, a check is performed to determine if the user's login credentials are valid. Finally, the user is checked to determine if they belong to any of the groups defined for that policy.

C. First, the user is checked to determine if they belong to any of the groups defined for that policy. Next, user restrictions are determined and port, time, and UTM profiles are applied. Finally, a check is performed to determine if the user's login credentials are valid.

Which of the following Regular Expression patterns will make the term "bad language" case in- sensitive?

A. [bad language]

B. /bad language/i

C. i/bad language/

D. "bad language"

E. /bad language/c

Which of the following is true regarding Switch Port Mode?

A. Allows all internal ports to share the same subnet.

B. Provides separate routable interfaces for each internal port.

C. An administrator can select ports to be used as a switch.

D. Configures ports to be part of the same broadcast domain.

Which of the following statements best describes the green status indicators that appear next to different FortiGuard Distribution Network services as illustrated in the exhibit?

A. They indicate that the FortiGate unit is able to connect to the FortiGuard Distribution Net- work.

B. They indicate that the FortiGate unit has the latest updates that are available from the Forti- Guard Distribution Network.

C. They indicate that updates are available and should be downloaded from the FortiGuard Dis- tribution Network to the FortiGate unit.

D. They indicate that the FortiGate unit is in the process of downloading updates from the Forti- Guard Distribution Network.

Alert emails enable the FortiGate unit to send email notifications to an email address upon detec- tion of a pre-defined event type.

Which of the following are some of the available event types in Web Config? (Select all that apply.)

A. Intrusion detected.

B. Successful firewall authentication.

C. Oversized file detected.

D. DHCP address assigned.

E. FortiGuard Web Filtering rating error detected.