Click the Exhibit button.

Referring to the exhibit, a FortiADC is load balancing IPv4 traffic between two next-hop routers. The FortiADC does not know the IP addresses of the servers. Also, the FortiADC is doing Layer 7 content inspection and modification.
In this scenario, which application delivery control is configured in the FortiADC?

• A. Layer 2
• B. Laye.4
• C. Layer 7
• D. Layer 3

Click the exhibit button.
A FortiGate device is configured to authenticate SSL VPN users using digital certificates. Part of the FortiGate configuration is shown in the exhibit.
Which two statements are true in this scenario? (Choose two.)

• A. OCSP is used to verify that the user-signed certificate has not expired.
• B. The authentication will fail if the OCSP server is down.
• C. The authentication will fail if the certificate does not contain user principle name (UPN) information.
• D. The authentication will fail if the user certificate does not contain the CA_Cert string in the Failed.

Click the Exhibit button.
Central NAT was configured on a FortiGate firewall. A sniffer shows ICMP packets out to a host on the Internet egresses with the port1 IP address instead of the virtual IP(VIP) that was configured.
Referring to the exhibit, which configuration will ensure that ICMP traffic is also translated?

• A. config firewall central-snat-map edit 1 set orig-addr "all" next end
• B. config firewall central-snat-map edit 1 unset protocol next end
• C. config firewall ippool edit "secondry_ip" set arp-intf 'port1' next end
• D. config firewall central-snat-map edit 1 set protocol 1 next end

Click the Exhibit button.

Your company has two data centers (DC) connected using a Layer 3 network. Servers in farm A need to connect to servers in farm B as though they all were in the same Layer 2 segment. What would be configured on the FortiGates on each DC to allow such connectivity?

• A. Create an IPsec tunnel with transport mode encapsulation.
• B. Create an IPsec tunnel with VXLAN encapsulation.
• C. Create an IPsec tunnel with VLAN encapsulation.
• D. Create an IPsec tunnel with Mode encapsulation.

In a FortiGate 5000 series, two FortiControllers are working as an SLBC cluster in a-p mode. The configuration shown below is applied.
config load-balance session-setup
set tcp-ingress enable
end
When statement is true on how new TCP sessions are handled by the Distributor Processor (DP)?

• A. The new session added the DP session table is automatically deleted, if the traffic is denied by the processing worker.
• B. No new session is added is the DP session table until the processing worker accepts the traffic.
• C. A new session added m the DP session table remains in the table remain in the traffic is denied by the procession worker.
• D. A new session added in the OP session table remains is the table only if traffic is traffic is accepted by the processing worker.