View the exhibit.

Based on this output, which statements are correct? (Choose two.)

A. The all VDOM is not synchronized between the primary and secondary FortiGate devices.

B. The root VDOM is not synchronized between the primary and secondary FortiGate devices.

C. The global configuration is synchronized between the primary and secondary FortiGate devices.

D. The FortiGate devices have three VDOMs.

Which of the following statements describe WMI polling mode for the FSSO collector agent? (Choose two.)

A. The NetSessionEnum function is used to track user logoffs.

B. WMI polling can increase bandwidth usage in large networks.

C. The collector agent uses a Windows API to query DCs for user logins.

D. The collector agent do not need to search any security event logs.

Which statements about DNS filter profiles are true? (Choose two.)

A. They can inspect HTTP traffic.

B. They can redirect blocked requests to a specific portal.

C. They can block DNS requests to known botnet command and control servers.

D. They must be applied in firewall policies with SSL inspection enabled.

Which one of the following processes is involved in updating IPS from FortiGuard?

A. FortiGate IPS update requests are sent using UDP port 443.

B. Protocol decoder update requests are sent to service.fortiguard.net.

C. IPS signature update requests are sent to update.fortiguard.net.

D. IPS engine updates can only be obtained using push updates.

Which statements about HA for FortiGate devices are true? (Choose two.)

A. Sessions handled by proxy-based security profiles cannot be synchronized.

B. Virtual clustering can be configured between two FortiGate devices that have multiple VDOMs.

C. HA management interface settings are synchronized between cluster members.

D. Heartbeat interfaces are not required on the primary device.