Loading questions...
Updated
Which statement about a One-to-One IP pool is true?
Refer to the exhibit.
An administrator wants to throttle the total volume of SMTP sessions to their email server.
Which DoS sensor can the administrator use to achieve this?
A FortiGate device has multiple VDOMs.
Which statement about an administrator account configured with the default prof_admin profile is true?
During the digital verification process, comparing the original and fresh hash results satisfies which security requirement?
Which three statements correctly describe transparent mode operation? (Choose three.)
Which two statements about conserve mode are true? (Choose two.)
Which two features are supported by web filter in flow-based inspection mode with NGFW mode set to profile-based? (Choose two.)
Refer to the exhibit.
An administrator has configured a dialup IPsec VPN with XAuth.
Which statement best describes what occurs during this scenario?
Consider a new IPsec deployment with the following criteria:
✑ All satellite offices must connect to the two HQ sites.
✑ The satellite offices do not need to communicate directly with other satellite offices.
✑ Backup VPN is not required.
✑ The design should minimize the number of tunnels being configured.
Which topology should you use to satisfy all of the requirements?
When override is enabled, which option shows the process and selection criteria that is used to elect the primary FortiGate in an HA cluster?
HTTP public key pinning (HPKP) can be an obstacle to implementing full SSL inspection.
In which two ways can you resolve this problem? (Choose two.)
A company needs to provide SSL VPN access to two user groups. The company also needs to display a different welcome message for each group, on the SSL
VPN login.
To meet these requirements, what is required in the SSL VPN configuration?
Which two route attributes must be equal for static routes to be eligible for equal cost multipath (ECMP) routing? (Choose two.)
Which two statements are true when using WPAD with the DHCP discovery method? (Choose two.)
Refer to the exhibit.
Which two statements about SSL VPN timers are true? (Choose two.)
Refer to the exhibit.
Refer to the exhibit.
Which two statements about virtual domains (VDOMs) are true? (Choose two.)
What criteria does FortiGate use to look for a matching firewall policy to process traffic? (Choose two.)
Create a free account to unlock all questions for this exam.
Log In / Sign UpExamine the FortiGate configuration:
What will happen to unauthenticated users when an active authentication policy is followed by a fall through policy without authentication?
When using WPAD DNS method, which FQDN format do browsers use to query the DNS server?
The exhibit shows the IPS sensor configuration.
If traffic matches this IPS sensor, which two actions is the sensor expected to take? (Choose two.)
Given the FortiGate CLI output, why is the administrator getting the error shown in the exhibit?
Based on the firewall configuration shown in the exhibit, which two statements about application control behavior are true? (Choose two.)
The exhibit contains a session diagnostic output.
Which statement about the session diagnostic output is true?
The exhibit shows a raw log and firewall policies.
What information does this raw log provide? (Choose two.)