Question 71

An administrator wanted to configure an IPS sensor to block traffic that triggers a signature set number of times during a specific time period.
How can the administrator achieve the objective?
  • Question 72

    Refer to the exhibits.



    You are asked to implement an antivirus profile for files downloaded through FTP, HTTP, and HTTPS.
    While testing, you are successful with HTTP and FTP protocols, but FortiGate does not block the file download over HTTPS.
    What could be the cause?
  • Question 73

    Refer to the exhibits. The exhibits show a diagram of a FortiGate device connected to the network, as well as the firewall policy and IP pool configuration on the FortiGate device.
    Two PCs, PC1 and PC2, are connected behind FortiGate and can access the internet successfully. However, when the administrator adds a third PC to the network (PC3), the PC cannot connect to the internet.
    Based on the information shown in the exhibit, which two configuration options can the administrator use to fix the connectivity issue for PC3? (Choose two.)


  • Question 74

    Refer to the exhibit.

    An administrator has created a new firewall address to use as the destination for a static route.
    Why is the administrator not able to select the new address in the Destination field of the new static route?
  • Question 75

    When FortiGate performs SSL/SSH full inspection, you can decide how it should react when it detects an invalid certificate.
    Which three actions are valid actions that FortiGate can perform when it detects an invalid certificate? (Choose three.)