Fortinet Network Security Expert - FortiOS 5.4 Set 6

A source address object must be selected in the firewall policy. ✘ A source user/group may be selected in the firewall policy. ✘ A source device may be defined in the firewall policy. ✘ A source interface must be selected in the firewall policy. ✔ A source user/group and device must be specified in the firewall policy. ✔

Grayware ✘ Virus ✘ Sandbox ✘ Heuristic ✔

All routes to the destination subnet configured in the link health monitor are removed from the routing table. ✘ The distance values of all routes using interface configured in the link health monitor are increased. ✘ The priority values of all routes using configured in the link health monitor are increased. ✘ All routes using the next-hop gateway configured in the link health monitor are removed from the routing table. ✔

5 ✘ 2 ✘ 3 ✘ 4 ✔

Event log ✘ Security log ✘ Forward log ✘ Syslog ✔

Through FortiGuard updates. ✘ Upgrade the FortiOS firmware to a newer release. ✘ By running the Application Control auto-learning feature. ✘ Signatures are hard coded to the device and cannot be updated. ✔

11 ✘ 1 ✘ 5 ✔

Disclaimers can be used in conjunction with captive portal. ✘ Disclaimers appear before users authenticate. ✘ Disclaimers can be bypassed through security exemption lists. ✘ Disclaimers must be accepted in order to continue to the authentication login or originally intended destination. ✔

Interrupt boot sequence, modify the boot registry and reboot. After changing the password, reset the boot registry. ✘ Log in through the console port using the maintainer account within several seconds of physically power cycling the FortiGate. ✘ Hold down the CTRL + Esc (Escape) keys during reboot, then reset the admin password. ✘ Interrupt the boot sequence and restore a configuration file for which the password has been modified. ✔

FortiGate will still subject that persons traffic to firewall policies; it will not bypass them. ✘ FortiGate will drop the packets and not respond. ✘ FortiGate responds with a block message, indicating that it will not allow that person to log in. ✘ FortiGate responds only if the administrator uses a secure protocol. Otherwise, it does not respond ✔