A.This setup requires at least two firewall policies with the action set to IPsec.

B.The TunnelB route is the primary route for reaching the remote site. The TunnelA route is used only if the TunnelB VPN is down.

C.Dead peer detection must be disabled to support this type of IPsec setup.

D.This is a redundant IPsec setup.

A.The action on the firewall policy must be set to deny.

B.Web filter should be enabled on the firewall policy to complement the antivirus profile.

C.The firewall policy does not apply deep content inspection.

D.The firewall policy must be configured in proxy-based inspection mode.

A.A certificate is not required on the remote peer when you set the signature as the authentication method.

B.Enabling XAuth results in a faster authentication because fewer packets are exchanged.

C.For a stronger authentication, you can also enable extended authentication (XAuth) to request the remote peer to provide a username and password

D.FortiGate supports pre-shared key and signature as authentication methods.

A.Traffic to inappropriate web sites

B.Server information disclosure attacks

C.Credit card data leaks

D.Traffic to botnetservers

E.SQL injection attacks

A.A firewall policy allowed the connection.

B.A new traffic session is created.

C.The default route is required to receive a reply.

D.The debug flow is of ICMP traffic.