You are migrating the branches of a customer to FortiGate devices. They require independent routing tables on the LAN side of the network.
After reviewing the design, you notice the firewall will have many BGP sessions as you have two data centers (DC) and two ISPs per DC while each branch is using at least 10 internal segments.
Based on this scenario, what would you suggest as the more efficient solution, considering that in the future the number of internal segments, DCs or internet links per DC will increase?

• A. Redesign the SD-WAN deployment to only use a single VPN tunnel and segment traffic using VRFs on BGP
• B. No change in design is needed as even small FortiGate devices have a large memory capacity.
• C. Implement network-id, neighbor-group and increase the advertisement-interval
• D. Acquire a FortiGate model with more capacity, considering the next 5 years growth.

Refer to the exhibits.

You must integrate a FortiMail and FortiSandbox Enhanced Cloud solution for a customer who is concerned about the e-mails being delayed for too long.
According to the configuration shown in the exhibits, which would be an expected behavior?

• A. If an attachment is sent to the FortiSandbox while the job queue is full, the e-mail might be delayed for up to 30 minutes, then e-mail will be relayed to the mail server.
• B. FortiMail will not wait for results but only for attachments that have been already submitted to the FortiSandbox in the last 60 minutes.
• C. FortiMail will relay valid e-mails to the mail server as soon as it is done with other local inspections.
• D. FortiMail will ignore the timeout value if content disarm and reconstruction (CDR) is enabled.

Refer to the exhibits.

The exhibit shows a FortiGate model device that will be used for zero touch provisioning and a CLI Template.

To facilitate a more efficient roll out of FortiGate devices, you are tasked with using meta fields with the CLI Template to configure the DHCP server on the "office1" FortiGate.
Given this scenario, what would be the output of the config ip-range section on the CLI Template?

• A.
  
• B.
  
• C.
  
• D.
  

An HA topology is using the following configuration:

Based on this configuration, how long will it take for a failover to be detected by the secondary cluster member?

• A. 100ms
• B. 600ms
• C. 200ms
• D. 300ms

Refer to the exhibit.

A customer is trying to setup a Playbook automation using a FortiAnalyzer, FortiWeb and FortiGate. The intention is to have the FortiGate quarantine any source of SQL Injection detected by the FortiWeb. They got the automation stitch to trigger on the FortiGate when simulating an attack to their website, but the quarantine object was created with the IP 0.0.0.0. Referring to the configuration and logs in the exhibits, which two statements are true? (Choose two.)

• A. The Group By option in the handler should be different to src, so src can be used on the Playbook configuration.
• B. To diagnose this issue, you need to use the command diagnose test application oftpd 22.
• C. The FortiAnalyzer ADOM Type must be Fabric.
• D. FortiSOC Playbooks combining FortiWeb and FortiGate are not supported.
• E. To fix the issue the parameter for script on the Playbook configuration should be epip.