Refer to the exhibit.

The administrator did not override the FortiGuard FODN or IP address in the FortiGate configuration Which IP address did FortiGate get when resolving the servicem,fortiguard.net name?

• A. 96.45.33.65
• B. 208.91.112.194
• C. 64.26.151.37
• D. 209.22.147.36

Which of the following regarding protocol states is true? (Choose one answer)

• A. proto_state=00 indicates that UDP traffic flows in both directions.
• B. proto_state=01 indicates one-way ICMP traffic.
• C. proto_state=10 indicates an established TCP session.
• D. proto_state=01 indicates an established TCP session.

What are two reasons you might see iprope_in_check() check failed, drop when using the debug flow?
(Choose two.)

• A. VIP or IP pool misconfiguration.
• B. Packet was dropped because of traffic shaping.
• C. Trusted host list misconfiguration.
• D. Packet was dropped because of policy route misconfiguration.

Refer to the exhibits.

An administrator is testing application steering in SD-WAN. Before generating test traffic, the administrator collected the SD-WAN service and ISDB application-cache information shown in the first exhibit. After generating GoToMeeting test traffic, the administrator examined the corresponding traffic logs on FortiAnalyzer.
The administrator noticed that some traffic matched the implicit SD-WAN rule, but expected the traffic to match rule ID 1.
Which two reasons explain why some log messages show that the traffic matched the implicit SD-WAN rule?
(Choose two.)

• A. FortiGate could not refresh the routing information on the session after the application was detected.
• B. No configured SD-WAN rule matches traffic related to the Collaboration application GoToMeeting.
• C. Full SSL inspection is not enabled on the matching firewall policy.
• D. The session 3-tuple did not match any existing entry in the ISDB application cache.

Refer to the exhibit.

FortiGate is showing continuous high CPU usage During a maintenance window, the CLI command diagnose sys top displays the output shown in the exhibit. The CLI command diagnose twat application ipsmonitor 5 was run. but the CPU usage by daemon ipsengine did not drop Which immediate action can you take to reduce the CPU usage effectively?

• A. Disable IPS on all firewall policies.
• B. Bypass all IPS engines
• C. Reduce the number of IPS signatures enabled on the active IPS profiles
• D. Execute diagnose test application ipsMonitor 2inatead.