Question 1

Refer to the exhibit showing the history logs from a FortiMail device.

Which FortiMail email security feature can an administrator enable to treat these emails as spam?

Options :

A : DKIM validation in a session profile

B : Sender domain validation in a session profile

C : Impersonation analysis in an antispam profile

D : Soft fail SPF validation in an antispam profile

Answer: C

Question 2

You must analyze an event that happened at 20:37 UTC. One log relevant to the event is extracted from

FortiGate logs:

The devices and the administrator are all located in different time zones Daylight savings time (DST) is

disabled

• The FortiGate is at GMT-1000.

• The FortiAnalyzer is at GMT-0800

• Your browser local time zone is at GMT-03.00

You want to review this log on FortiAnalyzer GUI, what time should you use as a filter?

Options :

A : 20:37:08

B : 10:37:08

C : 17:37:08

D : 12.37:08

Answer: C

Question 3

Refer to the exhibit.

You need to create a base SD-WAN configuration that includes SD-WAN rules and Performance SLAs for spoke sites with various connectivity types. It needs to be done in a way that can be easily applied to new sites with a minimum amount of change.

How should you create the SD-WAN zones?

Options :

A : With no members configured

B : With members and assign overlay interfaces

C : With members and assign interfaces but do not specify a gateway

D : With members without interface assignments

Answer: B

Question 4

Refer to the exhibit.

You have deployed a security fabric with three FortiGate devices as shown in the exhibit. FGT_2 has the following configuration:

Options :

A : Objects from the FortiGate FGT_2 will be synchronized to the upstream FortiGate.

B : Objects from the root FortiGate will only be synchronized to FGT__2.

C :

Objects from the root FortiGate will not be synchronized to any downstream FortiGate.

D : Objects from the root FortiGate will only be synchronized to FGT_3.

Answer: A

Question 5

You want to use the MTA adapter feature on FortiSandbox in an HA-Cluster. Which statement about this solution is true?

Options :

A : The configuration of the MTA Adapter Local Interface is different than on port1.

B : The MTA adapter is only available in the primary node.

C : The MTA adapter mode is only detection mode.

D : The configuration is different than on a standalone device.

Answer: B