Examine the Exhibits shown below, then answer the question that follows.

Review the following DLP Sensor (Exhibit 1):

Review the following File Filter list for rule #1 (Exhibit 2):

Review the following File Filter list for rule #2 (Exhibit 3):

Review the following File Filter list for rule #3 (Exhibit 4):

An MP3 file is renamed to `workbook.exe' and put into a ZIP archive. It is then sent through the FortiGate device over HTTP. It is intercepted and processed by the configuration shown in the above Exhibits 1-4. Assuming the file is not too large for the File scanning threshold, what action will the FortiGate unit take?

A. The file will be detected by rule #1 as an `Audio (mp3)', a log entry will be created and it will be allowed to pass through.

B. The file will be detected by rule #2 as a "*.exe", a log entry will be created and the interface that received the traffic will be brought down.

C. The file will be detected by rule #3 as an Archive(zip), blocked, and a log entry will be created.

D. Nothing, the file will go undetected.

Two FortiGate devices fail to form an HA cluster, the device hostnames are STUDENT and REMOTE. Exhibit A shows the command output of 'show system ha' for the STUDENT device. Exhibit B shows the command output of 'show system ha' for the REMOTE device.

Exhibit A: Exhibit B

Which one of the following is the most likely reason that the cluster fails to form?

A. Password

B. HA mode

C. Hearbeat D. Override

Review the IPsec phase1 configuration in the Exhibit shown below; then answer the question following it.

Which of the following statements are correct regarding this configuration? (Select all that apply).

A. The phase1 is for a route-based VPN configuration.

B. The phase1 is for a policy-based VPN configuration.

C. The local gateway IP is the address assigned to port1.

D. The local gateway IP address is 10.200.3.1.

Shown below is a section of output from the debug command diag ip arp list.

index=2 ifname=port1 172.20.187.150 00:09:0f:69:03:7e state=00000004 use=4589 confirm=4589 update=2422 ref=1

In the output provided, which of the following best describes the IP address 172.20.187.150?

A. It is the primary IP address of the port1 interface.

B. It is one of the secondary IP addresses of the port1 interface.

C. It is the IP address of another network device located in the same LAN segment as the FortiGate unit's port1 interface.

Bob wants to send Alice a file that is encrypted using public key cryptography.

Which of the following statements is correct regarding the use of public key cryptography in this scenario?

A. Bob will use his private key to encrypt the file and Alice will use her private key to decrypt the file.

B. Bob will use his public key to encrypt the file and Alice will use Bob's private key to decrypt the file.

C. Bob will use Alice's public key to encrypt the file and Alice will use her private key to decrypt the file.

D. Bob will use his public key to encrypt the file and Alice will use her private key to decrypt the file.

E. Bob will use Alice's public key to encrypt the file and Alice will use Bob's public key to decrypt the file.

Which of the following cannot be used in conjunction with the endpoint compliance check?

A. HTTP Challenge Redirect to a Secure Channel (HTTPS) in the Authentication Settings.

B. Any form of firewall policy authentication.

C. WAN optimization.

D. Traffic shaping.

An administrator wishes to generate a report showing Top Traffic by service type, but wants to exclude SMTP traffic from the report.

Which of the following statements best describes how to do this?

A. In the Service field of the Data Filter, type 25/smtp and select the NOT checkbox.

B. Add the following entry to the Generic Field section of the Data Filter: service="!smtp".

C. When editing the chart, uncheck mlog to indicate that Mail Filtering data is being excluded when generating the chart.

D. When editing the chart, enter 'dns' in the Exclude Service field.

A static route is configured for a FortiGate unit from the CLI using the following commands:

config router static edit 1 set device "wan1" set distance 20 set gateway 192.168.100.1 next end

Which of the following conditions is NOT required for this static default route to be displayed in the FortiGate unit's routing table?

A. The Administrative Status of the wan1 interface is displayed as Up.

B. The Link Status of the wan1 interface is displayed as Up.

C. All other default routes should have an equal or higher distance.

D. You must disable DHCP client on that interface.

You are the administrator in charge of a FortiGate unit which acts as a VPN gateway. You have chosen to use Interface Mode when configuring the VPN tunnel and you want users from either side to be able to initiate new sessions. There is only 1 subnet at either end and the FortiGate unit already has a default route.

Which of the following configuration steps are required to achieve these objectives? (Select all that apply.)

A. Create one firewall policy.

B. Create two firewall policies.

C. Add a route for the remote subnet.

D. Add a route for incoming traffic.

E. Create a phase 1 definition.

F. Create a phase 2 definition.

An administrator sets up a new FTP server on TCP port 2121. A FortiGate unit is located between the FTP clients and the server. The administrator has created a policy for TCP port 2121.

Users have been complaining that when downloading data they receive a 200 Port command successful message followed by a 425 Cannot build data connection message.

Which of the following statements represents the best solution to this problem?

A. Create a new session helper for the FTP service monitoring port 2121.

B. Enable the ANY service in the firewall policies for both incoming and outgoing traffic.

C. Place the client and server interface in the same zone and enable intra-zone traffic.

D. Disable any protection profiles being applied to FTP traffic.