Exhibit

Click the Exhibit button.
You are working on an entry level model FortiGate that has been configured in flow-based inspection mode with various settings optimized for performance. It appears that the main Internet firewall policy is using the antivirus profile labelled default. Your customer has found that some virus samples are not being caught by the FortiGate.
Referring to the exhibit, what is causing the problem?

• A. The set default-db configure was set to extreme.
• B. The default AV profile was modified to use quick scan-mode.
• C. The mobile-malware-db configuration was set to enable.
• D. The set options scan configuration items should have been changed to not option scan avmonitor.

You are asked to add a FortiDDoS to the network to combat detected slow connection attacks such as Slowloris.
Which prevention mode on FortiDDoS will protect you against this specific type of attack?

• A. rate limiting mode
• B. blocking mode
• C. asymmetric mode
• D. aggressive aging mode

Exhibit
Click the Exhibit button.
You have deployed several perimeter FortiGates with internal segmentation FortiGates behind them. All FortiGate devices are logging to FortiAnalyzer. When you search the logs in FortiAnalyzer for denied traffic, you see numerous log messages, as shown in the exhibit, on your perimeter FortiGates only.

Which two actions would reduce the number of these log messages? (Choose two.)

• A. Apply an application control profile lo the perimeter FortiGates that does not inspect DNS traffic to the outbound firewall policy.
• B. Configure the internal ForbGates to communicate to ForpGuard using port 8888.
• C. Disable DNS events logging horn ForirGate In the config log fortianalyser filter section.
• D. Remove DNS signature* <rom the IPS protte appfced to the outbound firewall policy.

A FortOS devices is used for termination of VPNs for number of remote spoke VPN units (designated group A spokes) using a phase 1 main mode dial-up tunnel using pre-shared. Your company recently acquired another organization. You are asked establish VPN correctively for the newly acquired organization's sites which new devices will be provisioned (designated Group B spokes). Both exiting (Group A) and new (Group B) spoke units are dynamically addressed. You are asked to ensure that spokes from the acquired organization (Group B) have different access permission than your existing VPN spokes (Group A).
Which two solutions meet the represents for the new spoke group? (Choose two.)

• A. Implement a new phase 1 dial-up main mode tunnel with a different pre-shared key than the Group A spokes. Use standard policies to filter for the new dial-up tunnel
• B. Implement a new phase 1 dial-up main mode tunnel with certificate authentication. Use standard policies to filter for the dial-up tunnel.
• C. Implement separate phase 1 dial-up aggressive mode tunnels with a distinct peer ID. Use standard policies to filter traffic for the new dial-up tunnel.
• D. implements a new phase 1 dial-up mode tunnel with preshared keys and XAuth. Use identity to filter traffic.

Exhibit

Your organization has a FortrGate cluster that is connected to two independent ISPs. You must configure the FortiGate failover for a single ISP failure to occur without disruption.
Referring to the exhibit, which two FortiGate BGP features would be used to accomplish this task' (Choose two.)

• A. Enable EBGP multipath
• B. Enable BFD
• C. Enable graceful restart
• D. Enable synchronization