figuritas 2

refer to the exhibit. which contains a radius server configuration. an administrator added a configuration for a new RADIUS server while configuring the administrator selected the include in every user group option. what will be the impact of using include in every user group option in a RADIUS configuration? 66

• this option places the RADIUS server, and all users who can authenticate against that server into every fortigate user group

• this option places all fortigate users and groups required to authenticate into the RADIUS server which in this case is fortiauthenticator

• this option places the RADIUS server and all users who can authenticate against that server, into every radius group

• this option places all users into every RADIUS user group, including groups that are used for the LDAP server on fortigate

refer to the exhibit. which contains a radius server configuration. an administrator added a configuration for a new RADIUS server while configuring the administrator selected the include in every user group option. what will be the impact of using include in every user group option in a RADIUS configuration? 66

• this option places the RADIUS server, and all users who can authenticate against that server into every fortigate user group

• this option places all fortigate users and groups required to authenticate into the RADIUS server which in this case is fortiauthenticator

• this option places the RADIUS server and all users who can authenticate against that server, into every radius group

• this option places all users into every RADIUS user group, including groups that are used for the LDAP server on fortigate

the exhibit shows a diagram of a fortigate device connected to the network, the firewall policy and VIP configuration on the fortigate device, and the routing table on the ISP router................(68)

• in the VIP configuration. enable arp-reply

• enable port forwarding on the, server to map the external service port to the internal service port

• in the firewall policy configuration, enable match-vip

• configure a loopback interface with address 203.0.113.2/32

the exhibit shows a diagram of a fortigate device connected to the network, the firewall policy and VIP configuration on the fortigate device, and the routing table on the ISP router................(68)

• in the VIP configuration. enable arp-reply

• enable port forwarding on the, server to map the external service port to the internal service port

• in the firewall policy configuration, enable match-vip

• configure a loopback interface with address 203.0.113.2/32

what are the two results of this configuration? choose two. 69

• device detection on all interfaces is enforced for 30 minutes

• the number of logs generated by denied traffic is reduced

• a session for denied traffic is created

• denied users are blocked for 30 minutes

what are the two results of this configuration? choose two. 69

• device detection on all interfaces is enforced for 30 minutes

• the number of logs generated by denied traffic is reduced

• a session for denied traffic is created

• denied users are blocked for 30 minutes

exhibit a shows system performance output exhibit B shows a fortigate configured with the default configuration of high memory usage thresholds. based on the system performance output which two statement are correct?choose two 70

• administrators can access fortigate only through the console port

• fortigate will start sending all files to fortisandbox for inspection

• fortigate has entered conserve mode

• adminstrators cannot change the configuration

exhibit a shows system performance output exhibit B shows a fortigate configured with the default configuration of high memory usage thresholds. based on the system performance output which two statement are correct?choose two 70

• administrators can access fortigate only through the console port

• fortigate will start sending all files to fortisandbox for inspection

• fortigate has entered conserve mode

• adminstrators cannot change the configuration

the exhibits show the firewall policies and the objects used in the firewall policies. the administrator is using the policy lookup feature and has entered the search criteria shown in the exhibit. which policy will be highlighted, based on the input criteria? 71

• policies with ID 2 and 3

• policy with ID 4

• policy with ID 5

• policy with ID 1

refer to the exhibit showing a debug output. which two statements about the debug flow output are correct? choose two. 76

• the default route is required to receive a reply

• a new traffic setsion or is created

• a firewall policy alloweb the connection

• the debug flow is of ICMP traffic