لا تريد أن تفوت شيئا؟

نصائح اجتياز امتحان الشهادة

آخر أخبار الامتحانات ومعلومات الخصم

برعاية وحديثة من قبل خبرائنا

نعم، أرسل لي النشرة الإخبارية

خذ اختبارات أخرى عبر الإنترنت

السؤال #1
View the exhibit, which contains the output of a BGP debug command, and then answer the question below. Which of the following statements about the exhibit are true? (Choose two.)
A. The local router's BGP state is Established with the 10
B. Since the counters were last reset; the 10
C. The local router has received a total of three BGP prefixes from all peers
D. The local router has not established a TCP session with 100
عرض الإجابة
اجابة صحيحة: D
السؤال #2
How are bulk configuration changes made using FortiManager CLI scripts? (Choose two.)
A. When run on the All FortiGate in ADOM, changes are automatically installed without the creation of a new revision history
B. When run on the Device Database, changes are applied directly to the managed FortiGate device
C. When run on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation
D. When run on the Policy Package, ADOM database, you must use the installation wizard to apply the changes to the managed FortiGate device
عرض الإجابة
اجابة صحيحة: A
السؤال #3
Which statements about bulk configuration changes using FortiManager CLI scripts are correct? (Choose two.)
A. When executed on the Policy Package, ADOM database, changes are applied directly to the managed FortiGate
B. When executed on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate
C. When executed on the All FortiGate in ADOM, changes are automatically installed without creating a new revision history
D. When executed on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation
عرض الإجابة
اجابة صحيحة: AC
السؤال #4
Which two statements about the Security Fabric are true? (Choose two.)
A. Only the root FortiGate collects network topology information and forwards it to FortiAnalyzer
B. Only the root FortiGate sends logs to FortiAnalyzer
C. Only FortiGate devices with fabric-object-unification set to default will receive and synchronize global CMDB objects sent by the root FortiGate
D. FortiGate uses FortiTelemetry protocol to communicate with FortiAnalyzer
عرض الإجابة
اجابة صحيحة: D
السؤال #5
Refer to the exhibit, which contains the output of the diagnose vpn tunnel list. Which command will capture ESP traffic for the VPN named DialUp_0?
A. diagnose sniffer packet any ‘esp and host 10
B. diagnose sniffer packet any ‘ip proto 50’
C. diagnose sniffer packet any ‘host 10
D. diagnose sniffer packet any ‘port 4500’
عرض الإجابة
اجابة صحيحة: A
السؤال #6
An LDAP user cannot authenticate against a FortiGate device. Examine the real time debug output shown in the exhibit when the user attempted the authentication; then answer the question below. Based on the output in the exhibit, what can cause this authentication problem?
A. User student is not found in the LDAP server
B. User student is using a wrong password
C. The FortiGate has been configured with the wrong password for the LDAP administrator
D. The FortiGate has been configured with the wrong authentication schema
عرض الإجابة
اجابة صحيحة: AC
السؤال #7
An administrator has configured two FortiGate devices for an HA cluster. While testing the HA failover, the administrator noticed that some of the switches in the network continue to send traffic to the former primary unit. The administrator decides to enable the setting link-failed-signal to fix the problem. Which statement is correct regarding this command?
A. Forces the former primary device to shut down all its non-heartbeat interfaces for one second while the failover occurs
B. Sends an ARP packet to all connected devices, indicating that the HA virtual MAC address is reachable through a new master after a failover
C. Sends a link failed signal to all connected devices
D. Disables all the non-heartbeat interfaces in all the HA members for two seconds after a failover
عرض الإجابة
اجابة صحيحة: A
السؤال #8
Refer to the exhibit, which contains the output of a debug command. If the default settings are in place, what can be concluded about the conserve mode shown in the exhibit?
A. FortiGate is currently blocking all new sessions regardless of the content inspection requirements or configuration settings due to high memory use
B. FortiGate is currently allowing new sessions that require flow-based or proxy-based content inspection but is not performing inspection on those sessions
C. FortiGate is currently blocking new sessions that require flow-based or proxy-based content inspection
D. FortiGate is currently allowing new sessions that require flow-based content inspection and blocking sessions that require proxy-based content inspection
عرض الإجابة
اجابة صحيحة: C
السؤال #9
In which two states is a given session categorized as ephemeral? (Choose two.)
A. A TCP session waiting for FIN ACK
B. A UDP session with packets sent and received
C. A UDP session with only one packet received
D. A TCP session waiting for the SYN ACK
عرض الإجابة
اجابة صحيحة: AD
السؤال #10
What does the dirty flag mean in a FortiGate session?
A. Traffic has been blocked by the antivirus inspection
B. The next packet must be re-evaluated against the firewall policies
C. The session must be removed from the former primary unit after an HA failover
D. Traffic has been identified as from an application that is not allowed
عرض الإجابة
اجابة صحيحة: D
السؤال #11
An administrator cannot connect to the GIU of a FortiGate unit with the IP address 10.0.1.254. The administrator runs the debug flow while attempting the connection using HTTP. The output of the debug flow is shown in the exhibit: Based on the error displayed by the debug flow, which are valid reasons for this problem? (Choose two.)
A. HTTP administrative access is disabled in the FortiGate interface with the IP address 10
B. Redirection of HTTP to HTTPS administrative access is disabled
C. HTTP administrative access is configured with a port number different than 80
D. The packet is denied because of reverse path forwarding check
عرض الإجابة
اجابة صحيحة: A
السؤال #12
An administrator is running the following sniffer in a FortiGate: diagnose sniffer packet any “host 10.0.2.10” 2 What information is included in the output of the sniffer? (Choose two.)
A. Ethernet headers
B. IP payload
C. IP headers
D. Port names
عرض الإجابة
اجابة صحيحة: BC
السؤال #13
View the exhibit, which contains a partial output of an IKE real-time debug, and then answer the question below. Based on the debug output, which phase-1 setting is enabled in the configuration of this VPN?
A. auto-discovery-sender
B. auto-discovery-forwarder
C. auto-discovery-shortcut
D. auto-discovery-receiver
عرض الإجابة
اجابة صحيحة: BC
السؤال #14
Which two statements about application-layer test commands are true? (Choose two.)
A. Some of them display real-time application debugs
B. Some of them can be used to restart an application
C. Some of them display statistics and configuration information about a feature or process
D. Some of them only display output, after you run the diagnose debug console enable command
عرض الإجابة
اجابة صحيحة: D
السؤال #15
Refer to the exhibit, which shows the output of a diagnose command. What can you conclude from the output shown in the exhibit? (Choose two.)
A. This is a pinhole session created to allow traffic for a protocol that requires additional sessions to operate through FortiGate
B. This is an expected session created by the IPS engine
C. Traffic in the original direction (coming from the IP address 10
D. Traffic in the original direction (coming from the IP address 10
عرض الإجابة
اجابة صحيحة: BC
السؤال #16
Which three conditions are required for two FortiGate devices to form an OSPF adjacency? (Choose three.)
A. OSPF interface network types match
B. OSPF router IDs are unique
C. OSPF interface priority settings are unique
D. Authentication settings match
E. OSPF link costs match
عرض الإجابة
اجابة صحيحة: BC
السؤال #17
Which of the following statements are true regarding the SIP session helper and the SIP application layer gateway (ALG)? (Choose three.)
A. SIP session helper runs in the kernel; SIP ALG runs as a user space process
B. SIP ALG supports SIP HA failover; SIP helper does not
C. SIP ALG supports SIP over IPv6; SIP helper does not
D. SIP ALG can create expected sessions for media traffic; SIP helper does not
E. SIP helper supports SIP over TCP and UDP; SIP ALG supports only SIP over UDP
عرض الإجابة
اجابة صحيحة: C
السؤال #18
Refer to the exhibits, which show the configuration on FortiGate and partial internet session information from a user on the internal network. An administrator would like to test session failover between the two service provider connections. What changes must the administrator make to force this existing session to immediately start using the other interface? (Choose two.)
A. Configure set snat-route-change enable
B. Change the priority of the port2 static route to 5
C. Change the priority of the port1 static route to 11
D. unset snat-route-change to return it to the default setting
عرض الإجابة
اجابة صحيحة: A

عرض الإجابات بعد التقديم

يرجى إرسال البريد الإلكتروني الخاص بك والواتس اب للحصول على إجابات الأسئلة.

ملحوظة: يرجى التأكد من صلاحية معرف البريد الإلكتروني وWhatsApp حتى تتمكن من الحصول على نتائج الاختبار الصحيحة.

بريد إلكتروني:
رقم الواتس اب/الهاتف: