خذ اختبارات أخرى عبر الإنترنت

السؤال #1

Which two statements about an auxiliary session are true? (Choose two.)

A. ith the auxiliary session setting enabled, ECMP traffic is accelerated to the NP6 processor

B. ith the auxiliary session setting disabled, only auxiliary sessions will be offloaded

C. ith the auxiliary session setting enabled, two sessions will be created in case of routing change

D. ith the auxiliary session setting disabled, for each traffic path, FortiGate will use the same auxiliary session

عرض الإجابة

اجابة صحيحة: AC

السؤال #2

Which three conditions are required for two FortiGate devices to form an OSPF adjacency? (Choose three.)

A. SPF costs match

B. SPF peer IDs match

C. ello and dead intervals match

D. P addresses are in the same subnet OSPF IP MTUs match

عرض الإجابة

اجابة صحيحة: CDE

السؤال #3

You have configured FortiManager as a local FDS to provide FortiGate AV and IPS updates, but FortiGate devices are not receiving updates to their AV signature databases, IPS engines, or IPS signature databases. Which two settings need to be verified for these features to function? (Choose two.)

A. ervice access needs to be enabled on FortiManager under System Settings > Network

B. ortiManager needs to be the license validation server for FortiGate devices trying to retrieve updated AV and IPS packages

C. ortiGate needs to have the sever list entry for FortiManager set to server-type update under config system central-management

D. ortiGate needs to have include-default-servers disabled under config system central-management

عرض الإجابة

اجابة صحيحة: AC

السؤال #4

Which statement about protocol options is true?

A. rotocol options allows administrators a streamlined method to instruct FortiGate to block all sessions corresponding to disabled protocols

B. rotocol options allow administrators to configure a maximum number of sessions for each configured protocol

C. rotocol options allows administrators to configure which Layer 4 port numbers map to upper-layer protocols, such as HTTP, SMTP, FTP, and so on

D. rotocol options allows administrators the ability to configure the Any setting for all enabled protocols which provides the most efficient use of system resources

عرض الإجابة

اجابة صحيحة: C

السؤال #5

Which two configuration commands change the default behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.)

A. et av-failopen off

B. et av-failopen pass

C. et fail-open enable

D. et ips fail-open disable

عرض الإجابة

اجابة صحيحة: AC

السؤال #6

Which two tasks are automated using the Import Configuration wizard on FortiManager? (Choose two.)

A. mporting interface mappings from managed devices

B. mporting static and dynamic route configurations from managed devices

C. mporting firewall address objects from managed devices

D. mporting devices to FortiManager

عرض الإجابة

اجابة صحيحة: AC

السؤال #7

Which two statements about the Security Fabric are true? (Choose two.)

A. nly FortiGate devices with fabric-object-unification set to default will receive and synchronize global CMDB objects sent by the root FortiGate

B. nly the root FortiGate collects network topology information and forwards it to FortiAnalyzer

C. nly the root FortiGate sends logs to FortiAnalyzer

D. ortiGate uses FortiTelemetry protocol to communicate with FortiAnalyzer

عرض الإجابة

اجابة صحيحة: AB

السؤال #8

What does the dirty flag mean in a FortiGate session configured for NGFW policy mode?

A. he URL category for this session has been updated by FortiGuard and the session needs to be checked against the policy again to ensure proper web filtering is applied

B. he application or URL category is unknown and needs to be rescanned by the IPS engine to try to identify the Layer 7 details

C. raffic has been identified as coming from an application that is not allowed and the relevant replacement message needs to be displayed to the user, if configured

D. he existing session table entry has been updated with the app_id and the firewall policy table needs to be checked for a match

عرض الإجابة

اجابة صحيحة: D

السؤال #9

Which configuration can be used to reduce the number of BGP sessions in an IBGP network?

A. oute-reflector-peer enable

B. oute-reflector-server enable

C. oute-reflector-client enable

D. oute-reflector enable

عرض الإجابة

اجابة صحيحة: C

السؤال #10

An administrator has been assigned the task of creating a set of firewall policies which must be evaluated before any custom policies defined within the policy packages of managed FortiGate devices, across all 25 ADOMs in FortiManager. How should the administrator accomplish this task?

A. se a CLI script from the root ADOM on FortiManager to push these new policies to all FortiGate devices, through the FGFM tunnel

B. ove the FortiGate devices into a single globally scoped ADOM, and merge policy packages, inserting the new firewall policies at the top

C. reate a footer policy in the Global ADOM containing the firewall policies that must be evaluated first, and then assign this footer policy to all other ADOMs

D. reate a header policy in the Global ADOM containing the firewall policies that must be evaluated first, and then assign this header policy to all other ADOMs

عرض الإجابة

اجابة صحيحة: D

عرض الإجابات بعد التقديم

يرجى إرسال البريد الإلكتروني الخاص بك والواتس اب للحصول على إجابات الأسئلة.

ملحوظة: يرجى التأكد من صلاحية معرف البريد الإلكتروني وWhatsApp حتى تتمكن من الحصول على نتائج الاختبار الصحيحة.

بريد إلكتروني:

رقم الواتس اب/الهاتف:

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان

عرض الإجابات بعد التقديم

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع! احصل الان

عرض الإجابات بعد التقديم

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان