Refer to the exhibit. Exhibit A

Exhibit B

Exhibit A shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate.

Based on the FortiGate configuration shown in the exhibits, what issue might you encounter when creating an SD-WAN zone for port1 and port2?

A. port1 is assigned a manual IP address.

B. port1 is referenced in a firewall policy.

C. port2 is referenced in a static route.

D. port1 and port2 are not administratively down.

In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two )

A. Traffic has matched none of the FortiGate policy routes.

B. Matched traffic failed RPF and was caught by the rule.

C. The FIB lookup resolved interface was the SD-WAN interface.

D. An absolute SD-WAN rule was defined and matched traffic.

Refer to the exhibit.

Based on the output shown in the exhibit, which two criteria on the SD-WAN member configuration can be used to select an outgoing interface in an SD-WAN rule? (Choose two.)

A. Set priority 10.

B. Set cost 15.

C. Set load-balance-mode source-ip-ip-based.

D. Set source 100.64.1.1.

FortiGate is connected to the internet and is obtaining the IP address on its egress interlace from the DHCP server

Which statement is due when FortiGate restarts and receives preconfigured settings to install as part of a zero-touch provisioning process?

A. FortiDeploy connects with FortiGate and provides the initial configuration to contact FortiManager

B. The zero-touch provisioning process completes internally, behind FortiGate

C. FortiManager registers FortiGate after the restart and retrieves the existing configuration

D. The FortiGate cloud key added to the FortiGate cloud portal and FortiGate performs a factory reset before the restart

Refer to the exhibit.

Which two statements about the IPsec VPN configuration and the status of the IPsec VPN tunnel are true? (Choose two.)

A. FortiGate creates separate virtual interfaces for each dial-up client.

B. FortiGate creates a single IPsec virtual interface that is shared by all clients.

C. FortiGate maps the remote gateway 100.64.3.1 to tunnel index interface 1.

D. FortiGate does not install IPsec static routes for remote protected networks in the routing table.