لا تريد أن تفوت شيئا؟

نصائح اجتياز امتحان الشهادة

آخر أخبار الامتحانات ومعلومات الخصم

برعاية وحديثة من قبل خبرائنا

نعم، أرسل لي النشرة الإخبارية

خذ اختبارات أخرى عبر الإنترنت
السؤال #1
Exhibit. Refer to exhibit, which shows a central management configuration Which server will FortiGate choose for web filler rating requests if 10.0.1.240 is experiencing an outage?
A. Public FortiGuard servers
B. 10
C. 10
D. 10
عرض الإجابة
اجابة صحيحة: AC
السؤال #2
Which configuration can be used to reduce the number of BGP sessions in on IBGP network?
A. Route-reflector-peer enable
B. Route-reflector-client enable
C. Route-reflector enable
D. Route-reflector-server enable
عرض الإجابة
اجابة صحيحة: AC
السؤال #3
Examine the output of the ‘get router info ospf neighbor’ command shown in the exhibit; then answer the question below. Which statements are true regarding the output in the exhibit? (Choose two.) Refer to the exhibit, which shows the output of a debug command. Which statement about the output is true?
A. TheOSPF routers with the IDs 0
B. l network
C. The OSPF router with the ID 0
D. The local FortiGate is the designated router for the wan1 network
E. The interface ToRemote is a point-to-point OSPF network
عرض الإجابة
اجابة صحيحة: AD
السؤال #4
A FortiGate device has the following LDAP configuration: The administrator executed the ‘dsquery’ command in the Windows LDAp server 10.0.1.10, and got the following output: >dsquery user –samid administrator “CN=Administrator, CN=Users, DC=trainingAD, DC=training, DC=lab” Based on the output, what FortiGate LDAP setting is configured incorrectly?
A. cnid
B. username
C. password
D. dn
عرض الإجابة
اجابة صحيحة: A
السؤال #5
Exhibit. Refer to the exhibit, which contains the partial interface configuration of two FortiGate devices. Which two conclusions can you draw from this con figuration? (Choose two)
A. 10
B. On failover new primary device uses the same MAC address as the old primary
C. The VRRP domain uses the physical MAC address of the primary FortiGate
D. By default FortiGate B is the primary virtual router
عرض الإجابة
اجابة صحيحة: C
السؤال #6
Refer to the exhibit, which shows an error in system fortiguard configuration. What is the reason you cannot set the protocol to udp in config system fortiguard?
A. FortiManager provides FortiGuard
B. fortiguard-anycast is set to enable
C. You do not have the corresponding write access
D. udp is not a protocol option
عرض الإجابة
اجابة صحيحة: D
السؤال #7
Refer to the exhibit, which shows a routing table. What two options can you configure in OSPF to block the advertisement of the 10.1.10.0 prefix? (Choose two.)
A. Remove the 16
B. Configure a distribute-list-out
C. Configure a route-map out
D. Disable Redistribute Connected
عرض الإجابة
اجابة صحيحة: B
السؤال #8
Refer to the exhibit, which shows a network diagram. Which IPsec phase 2 configuration should you impalement so that only one remote site is connected at any time?
A. Set route-overlap to allow
B. Set single-source to enable
C. Set route-overlap to either use—new or use-old
D. Set net-device to enable
عرض الإجابة
اجابة صحيحة: BD
السؤال #9
View the exhibit, which contains the output of a real-time debug, Which statement about this output is true? Which of the following statements is true regarding this output?
A. The requested URL belongs to category ID 255
B. The server hostname Is training, fortinet
C. FortiGate found the requested URL in its local cache
D. This web request was inspected using the ftgd-allow web filler profile
عرض الإجابة
اجابة صحيحة: B
السؤال #10
In which two states is a given session categorized as ephemeral? (Choose two.)
A. A TCP session waiting to complete the three-way handshake
B. A TCP session waiting for FIN ACK
C. A UDP session with packets sent and received
D. A UDP session with only one packet received
عرض الإجابة
اجابة صحيحة: A
السؤال #11
Refer to the exhibit, which shows two configured FortiGate devices and peering over FGSP. The main link directly connects the two FortiGate devices and is configured using the set session-syn-dev command. What is the primary reason to configure the main link?
A. To have both sessions and configuration synchronization in layer 2
B. To load balance both sessions and configuration synchronization between layer 2 and 3
C. To have only configuration synchronization in layer 3
D. To have both sessions and configuration synchronization in layer 3
عرض الإجابة
اجابة صحيحة: AB
السؤال #12
Which two statements about bfd are true? (Choose two)
A. It can support neighbor only over the next hop in BGP
B. You can disable it at the protocol level
C. It works for OSPF and BGP
D. You must configure n globally only
عرض الإجابة
اجابة صحيحة: BC
السؤال #13
You want to block access to the website ww.eicar.org using a custom IPS signature. Which custom IPS signature should you configure? A) B) C) D)
A. Option A
B. Option B
C. Option C
D. Option D
عرض الإجابة
اجابة صحيحة: C
السؤال #14
Refer to the exhibit, which contains partial output from an IKE real-time debug. Based on the debug output, which phase 1 setting is enabled in the configuration of this VPN?
A. auto-discovery-shortcut
B. auto-discovery-forwarder
C. auto-discovery-sender
D. auto-discovery-receiver
عرض الإجابة
اجابة صحيحة: B
السؤال #15
Which two statements about the BFD parameter in BGP are true? (Choose two.)
A. It allows failure detection in less than one second
B. The two routers must be connected to the same subnet
C. It is supported for neighbors over multiple hops
D. It detects only two-way failures
عرض الإجابة
اجابة صحيحة: D
السؤال #16
Which two statements about the Security Fabric are true? (Choose two.)
A. Only the root FortiGate collects network information and forwards it to FortiAnalyzer
B. FortiGate uses FortiTelemetry protocol to communicate with FortiAnalyzer
C. All FortiGate devices in the Security Fabric must have bidirectional FortiTelemetry connectivity
D. Branch FortiGate devices must be configured first
عرض الإجابة
اجابة صحيحة: AC
السؤال #17
Which statement about the designated router (DR) and backup designated router (BDR) in an OSPF multi-access network is true?
A. FortiGate first checks the OSPF ID to elect a DR
B. Non-DR and non-BDR routers will form full adjacencies to DR and BDR only
C. BDR is responsible for forwarding link state information from one router to another
D. Only the DR receives link state information from non-DR routers
عرض الإجابة
اجابة صحيحة: D
السؤال #18
Refer to the exhibit, which shows a network diagram. Which protocol should you use to configure the FortiGate cluster?
A. FGCP in active-passive mode
B. OFGSP
C. VRRP
D. FGCP in active-active mode
عرض الإجابة
اجابة صحيحة: A
السؤال #19
Which two statements about OCVPN are true? (Choose two.)
A. Only root vdom supports OCVPN
B. OCVPN supports static and dynamic IPs in WAN interface
C. OCVPN offers only Hub-Spoke VPNs
D. FortiGate devices under different FortiCare accounts can be used to form OCVPN
عرض الإجابة
اجابة صحيحة: AC
السؤال #20
Refer to the exhibit, which shows a custom signature. Which two modifications must you apply to the configuration of this custom signature so that you can save it on FortiGate? (Choose two.)
A. Add severity
B. Add attack_id
C. Ensure that the header syntax is F-SBID
D. Start options with --
عرض الإجابة
اجابة صحيحة: AB

عرض الإجابات بعد التقديم

يرجى إرسال البريد الإلكتروني الخاص بك والواتس اب للحصول على إجابات الأسئلة.

ملحوظة: يرجى التأكد من صلاحية معرف البريد الإلكتروني وWhatsApp حتى تتمكن من الحصول على نتائج الاختبار الصحيحة.

بريد إلكتروني:
رقم الواتس اب/الهاتف:


Copyright © 2024. Designer by SPOTO Official Website. All Rights Reserved.