Question 16

Refer to the exhibit, which shows a partial configuration from the remote authentication server.

Why does the FortiGate administrator need this configuration?
  • Question 17

    Refer to the exhibits. A diagram of a FortiGate device connected to the network VIP object and firewall policy configurations are shown.
    The WAN (port2) interface has the IP address 100.65.0.101/24.
    The LAN (port4) interface has the IP address 10.0.11.254/24.
    If the host 100.65.1.111sends a TCP SYN packet on port 443 to 100.65.0.200, what will the source address, destination address, and destination port of the packet be at the time FortiGate forwards the packet to the destination?


  • Question 18

    Refer to the exhibit.

    FortiGate has two separate firewall policies for Sales and Engineering to access the same web server with the same security profiles.
    Which action must the administrator perform to consolidate the two policies into one?
  • Question 19

    Refer to the exhibits.

    Based on the current HA status, an administrator updates the override and priority parameters on HQ-NGFW-
    1 and HQ-NGFW-2 as shown in the exhibit.
    What would be the expected outcome in the HA cluster?
  • Question 20

    Refer to the exhibits.



    The exhibits show a diagram of a FortiGate device connected to the network, as well as the firewall policy and IP pool configuration on the FortiGate device.
    Two PCs, PC1 and PC2, are connected behind FortiGate and can access the internet successfully. However, when the administrator adds a third PC to the network (PC3), the PC cannot connect to the internet.
    Based on the information shown in the exhibit, which two configuration options can the administrator use to fix the connectivity issue for PC3? (Choose two.)