Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

Which type of logs on FortiGate record information about traffic directly to and from the FortiGate management IP addresses?

A network administrator wants to set up redundant IPsec VPN tunnels on FortiGate by using two IPsec VPN tunnels and static routes.
*All traffic must be routed through the primary tunnel when both tunnels are up
*The secondary tunnel must be used only if the primary tunnel goes down
*In addition, FortiGate should be able to detect a dead tunnel to speed up tunnelfailover Which two key configuration changes are needed on FortiGate to meet the design requirements? (Choose two,)

FortiGuard categories can be overridden and defined in different categories. To create a web rating override for example.com home page, the override must be configured using a specific syntax.
Which two syntaxes are correct to configure web rating for the home page? (Choose two.)

Which statement correctly describes NetAPI polling mode for the FSSO collector agent?