Q107. Which certificate value can FortiGate use to determine the relationship between the issuer and the certificate?

Q108. How can you disable RPF checking?

Q109. The IPS engine is used by which three security features? (Choose three.)

Q110. A network administrator is configuring a new IPsec VPN tunnel on FortiGate. The remote peer IP address is dynamic. In addition, the remote peer does not support a dynamic DNS update service.
What type of remote gateway should the administrator configure on FortiGate for the new IPsec VPN tunnel to work?

Q111. 51 Which statement is correct regarding the inspection of some of the services available by web applications embedded in third-party websites?

Q112. Which two inspection modes can you use to configure a firewall policy on a profile-based next-generation firewall (NGFW)? (Choose two.)

Q113. Refer to the exhibit.

Based on the administrator profile settings, what permissions must the administrator set to run the diagnose firewall auth list CLI command on FortiGate?

Q114. Refer to the exhibits.
Exhibit A

Exhibit B

The exhibit contains a network interface configuration, firewall policies, and a CLI console configuration.
How will FortiGate handle user authentication for traffic that arrives on the LAN interface?

Q115. Which two settings can be separately configured per VDOM on a FortiGate device? (Choose two.)

Q116. Which three statements are true regarding session-based authentication? (Choose three.)

Q117. Refer to the exhibit, which contains a static route configuration.
An administrator created a static route for Amazon Web Services.

Which CLI command must the administrator use to view the route?

Q118. An administrator has a requirement to keep an application session from timing out on port 80. What two changes can the administrator make to resolve the issue without affecting any existing services running through FortiGate? (Choose two.)

Q119. Which two statements are true when FortiGate is in transparent mode? (Choose two.)

Q120. An administrator has configured two-factor authentication to strengthen SSL VPN access. Which additional best practice can an administrator implement?

Q121. A network administrator has enabled full SSL inspection and web filtering on FortiGate. When visiting any HTTPS websites, the browser reports certificate warning errors. When visiting HTTP websites, the browser does not report errors.
What is the reason for the certificate warning errors?

Q122. What is a reason for triggering IPS fail open?

Q123. Which two protocols are used to enable administrator access of a FortiGate device? (Choose two.)

Q124. Which three CLI commands can you use to troubleshoot Layer 3 issues if the issue is in neither the physical layer nor the link layer? (Choose three.)

Q125. FortiGate is operating in NAT mode and is configured with two virtual LAN (VLAN) subinterfaces added to the same physical interface.
In this scenario, what are two requirements for the VLAN ID? (Choose two.)

Q126. Refer to the exhibit.

The exhibit shows the IPS sensor configuration.
If traffic matches this IPS sensor, which two actions is the sensor expected to take? (Choose two.)

Q127. What is the limitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?

Q128. FortiGate is configured as a policy-based next-generation firewall (NGFW) and is applying web filtering and application control directly on the security policy. Which two other security profiles can you apply to the security policy? (Choose two.)

Q129. Which of the following are valid actions for FortiGuard category based filter in a web filter profile ui proxy-based inspection mode? (Choose two.)