لا تريد أن تفوت شيئا؟

نصائح اجتياز امتحان الشهادة

آخر أخبار الامتحانات ومعلومات الخصم

برعاية وحديثة من قبل خبرائنا

نعم، أرسل لي النشرة الإخبارية

خذ اختبارات أخرى عبر الإنترنت

السؤال #1
Refer to the exhibit, which shows the output of a debug command. Which two statements about the output are true? (Choose two.)
A. The local FortiGate OSPF router ID is 0
B. Port4 is connected to the OSPF backbone area
C. In the network connected to port4, two OSPF routers are down
D. The local FortiGate is the backup designated router
عرض الإجابة
اجابة صحيحة: A
السؤال #2
The logs in a FSSO collector agent (CA) are showing the following error: failed to connect to registry: PIKA1026 (192.168.12.232) What can be the reason for this error?
A. The CA cannot resolve the name of the workstation
B. The FortiGate cannot resolve the name of the workstation
C. The remote registry service is not running in the workstation 192
D. The CA cannot reach the FortiGate with the IP address 192
عرض الإجابة
اجابة صحيحة: AB
السؤال #3
View the exhibit, which contains the output of diagnose sys session stat, and then answer the question below. Which statements are correct regarding the output shown? (Choose two.)
A. There are 0 ephemeral sessions
B. All the sessions in the session table are TCP sessions
C. No sessions have been deleted because of memory pages exhaustion
D. There are 166 TCP sessions waiting to complete the three-way handshake
عرض الإجابة
اجابة صحيحة: A
السؤال #4
View the exhibit, which contains the output of diagnose sys session list, and then answer the question below. If the HA ID for the primary unit is zero (0), which statement is correct regarding the output?
A. This session is for HA heartbeat traffic
B. This session is synced with the slave unit
C. The inspection of this session has been offloaded to the slave unit
D. This session cannot be synced with the slave unit
عرض الإجابة
اجابة صحيحة: B
السؤال #5
Refer to the exhibit, which shows a FortiGate configuration. An administrator is troubleshooting a web filter issue on FortiGate. The administrator has configured a web filter profile and applied it to a policy; however, the web filter is not inspecting any traffic that is passing through the policy. What must the administrator change to fix the issue?
A. The administrator must increase webfilter-timeout
B. The administrator must disable webfilter-force-off
C. The administrator must change protocol to TCP
D. The administrator must enable fortiguard-anycast
عرض الإجابة
اجابة صحيحة: A
السؤال #6
View the exhibit, which contains a partial web filter profile configuration, and then answer the question below. Which action will FortiGate take if a user attempts to access www.dropbox.com, which is categorized as File Sharing and Storage?
A. FortiGate will exempt the connection based on the Web Content Filter configuration
B. FortiGate will block the connection based on the URL Filter configuration
C. FortiGate will allow the connection based on the FortiGuard category based filter configuration
D. FortiGate will block the connection as an invalid URL
عرض الإجابة
اجابة صحيحة: B
السؤال #7
Refer to the exhibit, which contains the partial output of a diagnose command. Based on the output, which two statements are correct? (Choose two.)
A. Anti-replay is enabled
B. The remote gateway IP is 10
C. DPD is disabled
D. Quick mode selectors are disabled
عرض الإجابة
اجابة صحيحة: AC
السؤال #8
Which two tasks are automated using the Install Wizard on FortiManager? (Choose two.)
A. Preview pending configuration changes for managed devices
B. Add devices to FortiManager
C. Import policy packages from managed devices
D. Install configuration changes to managed devices
E. Import interface mappings from managed devices
عرض الإجابة
اجابة صحيحة: D
السؤال #9
A FortiGate has two default routes: All Internet traffic is currently using port1. The exhibit shows partial information for one sample session of Internet traffic from an internal user: What would happen with the traffic matching the above session if the priority on the first default route (IDd1) were changed from 5 to 20?
A. The session would be deleted, and the client would need to start a new session
B. The session would remain in the session table, and its traffic would start to egress from port2
C. The session would remain in the session table, but its traffic would now egress from both port1 and port2
D. The session would remain in the session table, and its traffic would still egress from port1
عرض الإجابة
اجابة صحيحة: AB
السؤال #10
An administrator has configured a dial-up IPsec VPN with one phase 2, extended authentication (XAuth) and IKE mode configuration. The administrator has also enabled the IKE real time debug: diagnose debug application ike-1 diagnose debug enable In which order is each step and phase displayed in the debug output each time a new dial-up user is connecting to the VPN?
A. Phase1; IKE mode configuration; XAuth; phase 2
B. Phase1; XAuth; IKE mode configuration; phase2
C. Phase1; XAuth; phase 2; IKE mode configuration
D. Phase1; IKE mode configuration; phase 2; XAuth
عرض الإجابة
اجابة صحيحة: B
السؤال #11
View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below. Why didn’t the tunnel come up?
A. The pre-shared keys do not match
B. The remote gateway’s phase 2 configuration does not match the local gateway’s phase 2 configuration
C. The remote gateway’s phase 1 configuration does not match the local gateway’s phase 1 configuration
D. The remote gateway is using aggressive mode and the local gateway is configured to use man mode
عرض الإجابة
اجابة صحيحة: AD
السؤال #12
Examine the output from the BGP real time debug shown in the exhibit, then the answer the question below: Which statements are true regarding the output in the exhibit? (Choose two.)
A. BGP peers have successfully interchanged Open and Keepalive messages
B. Local BGP peer received a prefix for a default route
C. The state of the remote BGP peer is OpenConfirm
D. The state of the remote BGP peer will go to Connect after it confirms the received prefixes
عرض الإجابة
اجابة صحيحة: D
السؤال #13
Examine the following routing table and BGP configuration; then answer the question below. TheBGP connection is up, but the local peer is NOT advertising the prefix 192.168.1.0/24. Which configuration change will make the local peer advertise this prefix?
A. Enable the redistribution of connected routers into BGP
B. Enable the redistribution of static routers into BGP
C. Disable the setting network-import-check
D. Enable the setting ebgp-multipath
عرض الإجابة
اجابة صحيحة: C
السؤال #14
When using the SSL certificate inspection method for HTTPS traffic, how does FortiGate filter web requests when the browser client does not provide the server name indication (SNI) extension?
A. FortiGate uses CN information from the Subject field in the server’s certificate
B. FortiGate switches to the full SSL inspection method to decrypt the data
C. FortiGate blocks the request without any further inspection
D. FortiGate uses the requested URL from the user’s web browser
عرض الإجابة
اجابة صحيحة: AD
السؤال #15
View the exhibit, which contains the output of get sys ha status, and then answer the question below. Which statements are correct regarding the output? (Choose two.)
A. The slave configuration is not synchronized with the master
B. The HA management IP is 169
C. Master is selected because it is the only device in the cluster
D. port 7 is used the HA heartbeat on all devices in the cluster
عرض الإجابة
اجابة صحيحة: AD
السؤال #16
Refer to exhibit, which contains the output of a BGP debug command. Which statement explains why the state of the 10.200.3.1 peer is Connect?
A. The local router is receiving BGP keepalives from the remote peer, but the local peer has not received the OpenConfirm yet
B. The TCP session to 10
C. The local router is receiving the BGP keepalives from the peer, but it has not received a BGP prefix yet
D. The local router has received the BGP prefixes from the remote peer
عرض الإجابة
اجابة صحيحة: A
السؤال #17
View the central management configuration shown in the exhibit, and then answer the question below. Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243 is experiencing an outage?
A. 10
B. One of the public FortiGuard distribution servers
C. 10
D. 10
عرض الإجابة
اجابة صحيحة: BC
السؤال #18
What configuration changes can reduce the memory utilization in a FortiGate? (Choose two.)
A. Reduce the session time to live
B. Increase the TCP session timers
C. Increase the FortiGuard cache time to live
D. Reduce the maximum file size to inspect
عرض الإجابة
اجابة صحيحة: A
السؤال #19
What is the diagnose test application ipsmonitor 99 command used for?
A. To enable IPS bypass mode
B. To provide information regarding IPS sessions
C. To disable the IPS engine
D. To restart all IPS engines and monitors
عرض الإجابة
اجابة صحيحة: AC
السؤال #20
Which two configuration settings change the behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.)
A. IPS failopen
B. mem failopen
C. AV failopen
D. UTM failopen
عرض الإجابة
اجابة صحيحة: AC

عرض الإجابات بعد التقديم

يرجى إرسال البريد الإلكتروني الخاص بك والواتس اب للحصول على إجابات الأسئلة.

ملحوظة: يرجى التأكد من صلاحية معرف البريد الإلكتروني وWhatsApp حتى تتمكن من الحصول على نتائج الاختبار الصحيحة.

بريد إلكتروني:
رقم الواتس اب/الهاتف: