Click the Exhibit button.
You configured AV and Web filtering for your outgoing Internet connections. You later noticed that not all Web sessions are being inspected and you start troubleshooting the problem.
Referring to the exhibit, what would cause this problem?

• A. Web filtering is not licensed, therefore no inspection occurs.
• B. The SSL inspection options are not set to inspection
• C. These are problem with the connection to the Web filter servers, therefore the Web session cannot be categorized.
• D. The Web session is using QUIC which a not inspected by the FortiGate

Refer to the exhibit.

You have two data centers with a FortiGate 7000-series chassis connected by VPN. All traffic flows over an established generic routing encapsulation (GRE) tunnel between them. You are troubleshooting traffic that is traversing between Server VLAN A and Server VLAN B.
The performance is lower than expected and you notice all traffic is only going through the FPM in slot 3 while nothing through the FPM in slot 4.
Referring to the exhibit, which statement is true?

• A. Changing the algorithm to take source IP, destination IP and port into account will load balance this traffic to the other module.
• B. Configuring a load-balance flow-rule in the CLI will load-balance this traffic.
• C. There is no way to load-balance the traffic in this scenario.
• D. Removing traffic shaping from the firewall policy allowing this traffic will allow for load-balancing to the other module.

Exhibit
Click the Exhibit button.
You are trying to configure Link-Aggregation Group (LAG), but ports A and B do not appear on the list of member options. Referring to the exhibit, which statement is correct in this situation?

• A. The FortiGate SFP+ slot does not have the correct module.
• B. The FortiGate model does not have an Integrated Switch Fabric (ISF).
• C. The FortiGate interfaces are defective and require replacement.
• D. The FortiGate model being used does not support LAG.

Click the exhibit.
A VPN IPsec is connecting the headquarters office (HQ) with a branch office (BO) and OSPF is used to redistribute routes between the offices. After deployment, a server with IP address 10.10.10.35 located on the DMZ network of the BO FortiGate, was reported unreachable from hosts located on the LAN network of the same FortiGate.

Referring to the exhibit, which statement is true?

• A. Enabling NAT on the VPN firewall policy will solve the problem.
• B. A directly connected subnet is being partially superseded by an OSPF redistributed subnet.
• C. The incoming access list should have an accept action instead deny action to solve the problem.
• D. The ICMP packets are Being blocked by an implicit deny policy.

Refer to the exhibit.

The exhibit shows a full-mesh topology between FortiGate and FortiSwitch devices. To deploy this configuration, two requirements must be met:
* 20 Gbps full duplex connectivity is available between each FortiGate and the FortiSwitch devices
* The FortiGate HA must be in AP mode
Referring to the exhibit, what are two actions that will fulfill the requirements? (Choose two.)

• A. Configure the master FortiGate with one LAG and FortiLink split interface disabled on ports connected to cables A and C and make sure the same ports are used for cables B and D on the slave.
• B. Configure both FortiSwitch devices as peers with ICL over cable E, create one MCLAG on ports connected to cables A and C, and create another MCLAG on ports connected to cables B and D.
• C. Configure the master FortiGate with one LAG and FortiLink split interface enabled on ports connected to cables A and C and make sure the same ports are used for cables B and D on the slave.
• D. Configure both FortiSwitch devices as peers with ISL over cable E, create one MCLAG on ports connected to cables A and C, and create another MCLAG on ports connected to cables B and D.