لا تريد أن تفوت شيئا؟

نصائح اجتياز امتحان الشهادة

آخر أخبار الامتحانات ومعلومات الخصم

برعاية وحديثة من قبل خبرائنا

نعم، أرسل لي النشرة الإخبارية

خذ اختبارات أخرى عبر الإنترنت

السؤال #1
Given the routing database shown in the exhibit, which two statements are correct? (Choose two.)
A. The port3 default route has the highest distance
B. The port3 default route has the lowest metric
C. There will be eight routes active in the routing table
D. The port1 and port2 default routes are active in the routing table
عرض الإجابة
اجابة صحيحة: BD
السؤال #2
An administrator needs to increase network bandwidth and provide redundancy. What interface type must the administrator select to bind multiple FortiGate interfaces?
A. VLAN interface
B. Software Switch interface
C. Aggregate interface
D. Redundant interface
عرض الإجابة
اجابة صحيحة: D
السؤال #3
The exhibit shows a diagram of a FortiGate device connected to the network, the firewall policy and VIP configuration on the FortiGate device, and the routing table on the ISP router. When the administrator tries to access the web server public address (203.0.113.2) from the internet, the connection times out. At the same time, the administrator runs a sniffer on FortiGate to capture incoming web traffic to the server and does not see any output. Based on the information shown in the exhibit, what configura
A. Configure a loopback interface with address 203
B. In the VIP configuration, enable arp-reply
C. Enable port forwarding on the server to map the external service port to the internal service port
D. In the firewall policy configuration, enable match-vip
عرض الإجابة
اجابة صحيحة: AD
السؤال #4
Which of the following statements about central NAT are true? (Choose two.)
A. IP tool references must be removed from existing firewall policies before enabling central NAT
B. Central NAT can be enabled or disabled from the CLI only
C. Source NAT, using central NAT, requires at least one central SNAT policy
D. Destination NAT, using central NAT, requires a VIP object as the destination address in a firewall
عرض الإجابة
اجابة صحيحة: AD
السؤال #5
Which two inspection modes can you use to configure a firewall policy on a profile-based next-generation firewall (NGFW)? (Choose two.)
A. Proxy-based inspection
B. Certificate inspection
C. Flow-based inspection
D. Full Content inspection
عرض الإجابة
اجابة صحيحة: BC
السؤال #6
You have enabled logging on your FortiGate device for Event logs and all Security logs, and you have set up logging to use the FortiGate local disk . What is the default behavior when the local disk is full?
A. Logs are overwritten and the only warning is issued when log disk usage reaches the threshold of 95%
B. No new log is recorded until you manually clear logs from the local disk
C. Logs are overwritten and the first warning is issued when log disk usage reaches the threshold of 75%
D. No new log is recorded after the warning is issued when log disk usage reaches the threshold of 95%
عرض الإجابة
اجابة صحيحة: BC
السؤال #7
Which two configuration settings are synchronized when FortiGate devices are in an active-active HA cluster? (Choose two.)
A. FortiGuard web filter cache
B. FortiGate hostname
C. NTP
D. DNS
عرض الإجابة
اجابة صحيحة: BD
السؤال #8
A network administrator is configuring a new IPsec VPN tunnel on FortiGate. The remote peer IP address is dynamic. In addition, the remote peer does not support a dynamic DNS update service. Which type of remote gateway should the administrator configure on FortiGate for the new IPsec VPN tunnel to work?
A. Pre-shared key
B. Dialup user
C. Dynamic DNS
D. Static IP address
عرض الإجابة
اجابة صحيحة: D
السؤال #9
Which three criteria can a FortiGate use to look for a matching firewall policy to process traffic? (Choose three.)
A. Source defined as Internet Services in the firewall policy
B. Destination defined as Internet Services in the firewall policy
C. Highest to lowest priority defined in the firewall policy
D. Services defined in the firewall policy
E. Lowest to highest policy ID number
عرض الإجابة
اجابة صحيحة: D
السؤال #10
Which of the following are valid actions for FortiGuard category based filter in a web filter profile ui proxy-based inspection mode? (Choose two.)
A. Warning
B. Exempt
C. Allow
D. Learn
عرض الإجابة
اجابة صحيحة: B
السؤال #11
A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 fails to come up. The administrator has also re-entered the pre-shared key on both FortiGate devices to make sure they match. Based on the phase 1 configuration and the diagram shown in the exhibit, which two configuration changes will bring phase 1 up? (Choose two.)
A. On HQ-FortiGate, set IKE mode to Main (ID protection)
B. On both FortiGate devices, set Dead Peer Detection to On Demand
C. On HQ-FortiGate, disable Diffie-Helman group 2
D. On Remote-FortiGate, set port2 as Interface
عرض الإجابة
اجابة صحيحة: BCE
السؤال #12
Which three options are the remote log storage options you can configure on FortiGate? (Choose three.)
A. FortiCache
B. FortiSIEM
C. FortiAnalyzer
D. FortiSandbox
E. FortiCloud
عرض الإجابة
اجابة صحيحة: B
السؤال #13
Why does FortiGate keep TCP sessions in the session table for some seconds even after both sides (client and server) have terminated the session?
A. To remove the NAT operation
B. To generate logs
C. To finish any inspection operations
D. To allow for out-of-order packets that could arrive after the FIN/ACK packets
عرض الإجابة
اجابة صحيحة: A
السؤال #14
What is the limitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?
A. It limits the scope of application control to the browser-based technology category only
B. It limits the scope of application control to scan application traffic based on application category only
C. It limits the scope of application control to scan application traffic using parent signatures only
D. It limits the scope of application control to scan application traffic on DNS protocol only
عرض الإجابة
اجابة صحيحة: AC
السؤال #15
Which of the following statements is true regarding SSL VPN settings for an SSL VPN portal?
A. By default, FortiGate uses WINS servers to resolve names
B. By default, the SSL VPN portal requires the installation of a client's certificate
C. By default, split tunneling is enabled
D. By default, the admin GUI and SSL VPN portal use the same HTTPS port
عرض الإجابة
اجابة صحيحة: CD

عرض الإجابات بعد التقديم

يرجى إرسال البريد الإلكتروني الخاص بك والواتس اب للحصول على إجابات الأسئلة.

ملحوظة: يرجى التأكد من صلاحية معرف البريد الإلكتروني وWhatsApp حتى تتمكن من الحصول على نتائج الاختبار الصحيحة.

بريد إلكتروني:
رقم الواتس اب/الهاتف: