Refer to the exhibit.

The exhibit shows a full-mesh topology between FortiGate and FortiSwitch devices. To deploy this configuration, two requirements must be met:
* 20 Gbps full duplex connectivity is available between each FortiGate and the FortiSwitch devices
* The FortiGate HA must be in AP mode
Referring to the exhibit, what are two actions that will fulfill the requirements? (Choose two.)

• A. Configure both FortiSwitch devices as peers with ICL over cable E, create one MCLAG on ports connected to cables A and C, and create another MCLAG on ports connected to cables B and D.
• B. Configure the master FortiGate with one LAG and FortiLink split interface enabled on ports connected to cables A and C and make sure the same ports are used for cables B and D on the slave.
• C. Configure both FortiSwitch devices as peers with ISL over cable E, create one MCLAG on ports connected to cables A and C, and create another MCLAG on ports connected to cables B and D.
• D. Configure the master FortiGate with one LAG and FortiLink split interface disabled on ports connected to cables A and C and make sure the same ports are used for cables B and D on the slave.

A customer is looking for a way to remove javascripts, macros and hyperlinks from documents traversing the network without affecting the integrity of the content. You propose to use the Content disarm and
reconstruction (CDR) feature of the FortiGate.
Which two considerations are valid to implement CDR in this scenario? (Choose two.)

• A. The inspection mode of the FortiGate is not relevant for CDR to operate.
• B. Files processed by CDR can have the original copy quarantined on the FortiGate.
• C. CDR is supported on HTTPS, SMTPS, and IMAPS if deep inspection is enabled.
• D. CDR can only be performed on Microsoft Office Document and PDF files.

You are asked to implement a single FortiGate 5000 chassis using Session-aware Load Balance Cluster (SLBC) with Active - Passive FortinControllers. Both FortiControllers have the configuration shown below, with the rest of the configuration set to the default values:
config system ha
set mode dual
set password fortinetnse8
set group-id 5
set chassis-id 1
set minimize-chassis-failover enable
set hbdev "b1"
end
Both FortiControllers show Master status. What is the problem in this scenario?

• A. The b1 interface the two FortiConrollers do not see each other.
• B. The chassis ID settings on FotiControllers on slot 2 should be set to 2.
• C. The priority should be set higher for ForControllers on slot-1.
• D. The management interface of both FotiControllers was connected on the some network.

Click the Exhibit button. An administrator implements a multi-chassis link aggregation (MCLAG) solution using two FortiSwitch 448Ds and one FortiGate 3700D. As describes in the network topology shown in the exhibit, two links are connected to each FortiSwitch. What is requires to implement this solution? (Choose two.)

• A. An ICL link between both FortiSwitch devices needs to be added.
• B. Replace the FortiGate as this one does not have an ISF.
• C. Create two separate link aggregated (LAG) interfaces on the FortiGate side for each FortiSwitch.
• D. Add set fortilink-split-interface disable on the FortiLink interface.

You have deployed a FortiGate In NAT/Route mode as a secure as a web gateway with a few P-base authentication firewall policies. Your customer reports that some users now have different browsing permission =s from what is expected. All these users are browsing using internet Explorer through Desktop Connection to a Terminal Server. When you took at the Fortigate logs the username for the Terminal Server IP is not consistent.
Which action will correct this problem?

• A. Install the TS/Citrix on the terminal server
• B. Configure FSSO Advanced with LDAP integration
• C. Change the FSSO polling mode to windows NetAPI
• D. Make sure Terminal Service is using the correct DNS ever.