The Idle Timeout setting on a FortiGate unit applies to which of the following?

A. Web browsing

B. FTP connections

C. User authentication

D. Administrator access

E. Web filtering overrides

The command structure of the FortiGate CLI consists of commands, objects, branches, tables, and parameters. Which of the following items describes user?

A. A command

B. An object

C. A table

D. A parameter.

Shown below is a section of output from the debug command diag ip arp list.

In the output provided, which of the following best describes the IP address 172.20.187.150?

A. It is the primary IP address of the port1 interface.

B. It is one of the secondary IP addresses of the port1 interface.

C. It is the IP address of another network device located in the same LAN segment as the FortiGate unit's port1 interface.

A network administrator connects his PC to the INTERNAL interface on a FortiGate unit.

The administrator attempts to make an HTTPS connection to the FortiGate unit on the VLAN1 interface at the IP address of 10.0.1.1, but gets no connectivity.

The following troubleshooting commands are executed from the DOS prompt on the PC and from the CLI.

Based on the output from these commands, which of the following explanations is a possible cause of the problem?

A. The Fortigate unit has no route back to the PC.

B. The PC has an IP address in the wrong subnet.

C. The PC is using an incorrect default gateway IP address.

D. The FortiGate unit does not have the HTTPS service configured on the VLAN1 interface.

E. There is no firewall policy allowing traffic from INTERNAL-> VLAN1.

If you have lost your password for the "admin" account on your FortiGate, how should you reset it?

A. Log in with another administrator account that has "super_admin" profile permissions, then reset the password for the "admin" account.

B. Reboot the FortiGate. Via the local console, during the boot loader, use the menu to format the flash disk and reinstall the firmware. Then you can log in with the default password.

C. Power off the FortiGate. After several seconds, restart it. Via the local console, within 30 seconds after booting has completed, log in as "maintainer" and enter the CLI commands to set the password for the "admin" account.

D. Reboot the FortiGate. Via the local console, during the boot loader, use the menu to log in as "maintainer" and enter the CLI commands to set the password for the "admin" account.

In a Crash log, what does a status of 0 indicate?

A. Abnormal termination of a process

B. A process closed for any reason

C. Scanunitd process crashed

D. Normal shutdown with no abnormalities

E. DHCP process crashed

Why does FortiGate keep TCP sessions in the session table for some seconds even after both sides (client and server) have terminated the session?

A. To remove the NAT operation.

B. To generate logs

C. To finish any inspection operations.

D. To allow for out-of-order packets that could arrive after the FIN/ACK packets.

Alert emails enable the FortiGate unit to send email notifications to an email address upon detection of a pre-defined event type. Which of the following are some of the available event types in Web Config? (Select all that apply.)

A. Intrusion detected.

B. Successful firewall authentication.

C. Oversized file detected.

D. DHCP address assigned.

E. FortiGuard Web Filtering rating error detected.

Which of the following statements about central NAT are true? (Choose two.)

A. IP tool references must be removed from existing firewall policies before enabling central NAT.

B. Central NAT can be enabled or disabled from the CLI only.

C. Source NAT, using central NAT, requires at least one central SNAT policy.

D. Destination NAT, using central NAT, requires a VIP object as the destination address in a firewall policy.

Which statement about the FortiGuard services for the FortiGate is true?

A. Antivirus signatures are downloaded locally on the FortiGate.

B. FortiGate downloads IPS updates using UDP port 53 or 8888.

C. FortiAnalyzer can be configured as a local FDN to provide antivirus and IPS updates.

D. The web filtering database is downloaded locally on the FortiGate.