An administrator has configured central DNAT and virtual IPs. Which of the following can be selected in the firewall policy Destination field?

Refer to the exhibit.

The exhibit shows the two VLAN interfaces configuration.
A DHCP server is connected to the VLAN10interface. A DHCP client is connected to the VLAN5interface.
However, the DHCP client cannot get a dynamic IP address from the DHCP server.
What condition must exist in order for the DHCP client to successfully get the dynamic IP address?

Which two statements about antivirus scanning mode are true? (Choose two.)

Which of the following statements about policy-based IPsec tunnels are true? (Choose two.)

An employee connects to the https://example.com on the Internet using a web browser. The web server's certificate was signed by a private internal CA. The FortiGate that is inspecting this traffic is configured for full SSL inspection.
This exhibit shows the configuration settings for the SSL/SSH inspection profile that is applied to the policy that is invoked in this instance. All other settings are set to defaults. No certificates have been imported into FortiGate. View the exhibit and answer the question that follows.

Which certificate is presented to the employee's web browser?