لا تريد أن تفوت شيئا؟

نصائح اجتياز امتحان الشهادة

آخر أخبار الامتحانات ومعلومات الخصم

برعاية وحديثة من قبل خبرائنا

نعم، أرسل لي النشرة الإخبارية

خذ اختبارات أخرى عبر الإنترنت

السؤال #1
You are using Ansible to modify the configuration of several FortiGate VMs.What is the minimum number of files you need to create, and in which file should you configure the target FortiGate IP addresses?
A. One playbook file for each target and the required tasks, and one inventory file
B. One
C. One inventory file for each target device, and one playbook file
D. One text file for all target devices, and one playbook file
عرض الإجابة
اجابة صحيحة: D
السؤال #2
An administrator is planning to use FortiDevSec to detect vulnerabilities in container images and is researching any platform limitations that they must take into account when using that tool. What is a limitation of FortiDevSec container security scanning?
A. t focuses on scanning for encrypted secrets in containerized applications
B. t can detect vulnerabilities in containerized applications in Amazon Web Services (AWS) environments only
C. t does not support scanning private images that require Docker login
D. t is limited to dynamic application testing of container images
عرض الإجابة
اجابة صحيحة: C
السؤال #3
You are using Ansible to modify the configuration of several FortiGate VMs.What is the minimum number of files you need to create, and in which file should you configure the target FortiGate IP addresses?
A. One playbook file for each target and the required tasks, and one inventory file
B. One
C. One inventory file for each target device, and one playbook file
D. One text file for all target devices, and one playbook file
عرض الإجابة
اجابة صحيحة: B
السؤال #4
Refer to the exhibit. You are troubleshooting a FortiGate HA floating IP issue with Microsoft Azure. After the failover, the new primary device does not have the previous primary device floating IP address.What could be the possible issue with this scenario?
A. he error is caused by credential time expiration
B. he Azure service principal account must have a contributor role
C. ortiGate port4 does not have internet access
D. wrong client secret credential is used
عرض الإجابة
اجابة صحيحة: B
السؤال #5
What would be the impact of confirming to delete all the resources in Terraform?
A. It destroys all the resources tied to the AWS Identity and Access Management (IAM) user
B. It destroys all the resources in the resource group
C. It destroys all the resources in the
D. It destroys all the resources in the
عرض الإجابة
اجابة صحيحة: C
السؤال #6
Your DevOps team is evaluating different Infrastructure as Code (IaC) solutions for deploying complex Azure environments.What is an advantage of choosing Azure Bicep over other IaC tools available?
A. Azure Bicep generates deployment logs that are optimized to improve error handling
B. Azure Bicep provides immediate support for all Azure services, including those in preview
C. Azure Bicep requires less frequent schema updates than Azure Resource Manager (ARM) templates
D. Azure Bicep can reduce deployment costs by limiting resource utilization during testing
عرض الإجابة
اجابة صحيحة: B
السؤال #7
You must add an Amazon Web Services (AWS) network access list (NACL) rule to allow SSH traffic to a subnet for temporary testing purposes.When you review the current inbound and outbound NACL rules, you notice that the rules with number 5 deny SSH and telnet traffic to the subnet.What can you do to allow SSH traffic?
A. You do not have to create any NACL rules because the default security group rule automatically allows SSH traffic to the subnet
B. You must create a new allow SSH rule anywhere in the network ACL rule base to allow SSH traffic
C. You must create two new allow SSH rules, each with a number bigger than 5
D. You must create two new allow SSH rules, each with a number smaller than 5
عرض الإجابة
اجابة صحيحة: D
السؤال #8
Your organization has several FortiGate VMs deployed in Azure. You need to implement a solution with Azure native tools that allows you to determine whether packets are being permitted or blocked by the FortiGate VMs.Which solution can you use to meet these requirements?
A. Insert the VM traffic logs in Azure Sentinel
B. Install the Azure Monitor agent in all VMs
C. Use IP flow verify for each of the VMs
D. Configure Azure Advisor to analyze the network traffic
عرض الإجابة
اجابة صحيحة: C
السؤال #9
An administrator would like to use FortiCNP to keep track of sensitive data files located in the Amazon Web Services (AWS) S3 bucket and protect it from malware.Which FortiCNP feature should the administrator use?
A. FortiCNP Threat Detection policies
B. FortiCNP Risk Management policies
C. FortiCNP Data Scan policies
D. FortiCNP Compliance policies
عرض الإجابة
اجابة صحيحة: C
السؤال #10
You are using Ansible to modify the configuration of several FortiGate VMs.What is the minimum number of files you need to create, and in which file should you configure the target FortiGate IP addresses?
A. One playbook file for each target and the required tasks, and one inventory file
B. One
C. One inventory file for each target device, and one playbook file
D. One text file for all target devices, and one playbook file
عرض الإجابة
اجابة صحيحة: D
السؤال #11
You are using Ansible to modify the configuration of several FortiGate VMs.What is the minimum number of files you need to create, and in which file should you configure the target FortiGate IP addresses?
A. One playbook file for each target and the required tasks, and one inventory file
B. One
C. One inventory file for each target device, and one playbook file
D. One text file for all target devices, and one playbook file
عرض الإجابة
اجابة صحيحة: D
السؤال #12
Your DevOps team is evaluating different Infrastructure as Code (IaC) solutions for deploying complex Azure environments.What is an advantage of choosing Azure Bicep over other IaC tools available?
A. Azure Bicep generates deployment logs that are optimized to improve error handling
B. Azure Bicep provides immediate support for all Azure services, including those in preview
C. Azure Bicep requires less frequent schema updates than Azure Resource Manager (ARM) templates
D. Azure Bicep can reduce deployment costs by limiting resource utilization during testing
عرض الإجابة
اجابة صحيحة: B
السؤال #13
An administrator implements FortiWeb ingress controller to protect containerized web applications in an AWS Elastic Kubernetes Service (EKS) cluster.What can you conclude about the topology shown in FortiView?
A. The FortiWeb VM gets the latest cluster information through an SDN connector
B. This topology has two services and two ingress controllers deployed
C. Both services will be load balanced among the two nodes and the four pods
D. Adding a new service will update the FortiWeb configuration automatically
عرض الإجابة
اجابة صحيحة: A
السؤال #14
An administrator would like to use FortiCNP to keep track of sensitive data files located in the Amazon Web Services (AWS) S3 bucket and protect it from malware.Which FortiCNP feature should the administrator use?
A. FortiCNP Threat Detection policies
B. FortiCNP Risk Management policies
C. FortiCNP Data Scan policies
D. FortiCNP Compliance policies
عرض الإجابة
اجابة صحيحة: C
السؤال #15
An administrator would like to use FortiCNP to keep track of sensitive data files located in the Amazon Web Services (AWS) S3 bucket and protect it from malware.Which FortiCNP feature should the administrator use?
A. FortiCNP Threat Detection policies
B. FortiCNP Risk Management policies
C. FortiCNP Data Scan policies
D. FortiCNP Compliance policies
عرض الإجابة
اجابة صحيحة: C
السؤال #16
An administrator is looking for a solution that can provide insight into users and data stored in major SaaS applications in the multicloud environment.Which product should the administrator deploy to have secure access to SaaS applications?
A. FortiSandbox
B. FortiWeb
C. FortiSIEM
D. FortiCASB
عرض الإجابة
اجابة صحيحة: D
السؤال #17
Refer to the exhibit.The exhibit shows an active-passive high availability FortiGate pair with external and internal Azure load balancers There is no SDN connector used in this solution.Which configuration must the administrator implement on each FortiGate?
A. Single BGP route to Azure probe IP address
B. One static route to Azure Lambda IP address
C. Two static routes to Azure probe IP address
D. Two BGP routes lo Azure probe IP address
عرض الإجابة
اجابة صحيحة: C
السؤال #18
You have deployed a FortiGate HA cluster in Azure using a gateway load balancer for traffic inspection. However, traffic is not being routed correctly through the firewalls.What can be the cause of the issue?
A. The health probes for the gateway load balancer are failing, which causes traffic to bypass the HA cluster
B. The protected VMs are in a different Azure subscription, which prevents the gateway load balancer from forwarding traffic
C. The Fortinet VMs have IP forwarding disabled, which is required for traffic inspection
D. The gateway load balancer is not associated with the correct network security group (NSG) rules, which allow traffic to pass through
عرض الإجابة
اجابة صحيحة: C
السؤال #19
An administrator would like to use FortiCNP to keep track of sensitive data files located in the Amazon Web Services (AWS) S3 bucket and protect it from malware. Which FortiCNP feature should the administrator use?
A. ortiCNP Data Scan policies
B. ortiCNP Risk Management policies
C. ortiCNP Threat Detection policies
D. ortiCNP Compliance policies
عرض الإجابة
اجابة صحيحة: A
السؤال #20
Refer to the exhibit.You deployed an HA active-active load balance sandwich with two FortiGate VMs in Microsoft Azure.After the deployment, you prefer to use FGSP to synchronize sessions, and allow asymmetric return traffic. In the environment, FortiGate port 1 and port 2 are facing external and internal load balancers respectively.What IP address must you use in the peerip configuration?
A. The opposite FortiGate port 2 IP address
B. The public load balancer port 2 IP address
C. The internal load balancer port 1 IP address
D. The opposite FortiGate port 1 IP address
عرض الإجابة
اجابة صحيحة: D

View The Updated Fortinet Exam Questions

SPOTO Provides 100% Real Fortinet Exam Questions for You to Pass Your Fortinet Exam!

عرض الإجابات بعد التقديم

يرجى إرسال البريد الإلكتروني الخاص بك والواتس اب للحصول على إجابات الأسئلة.

ملحوظة: يرجى التأكد من صلاحية معرف البريد الإلكتروني وWhatsApp حتى تتمكن من الحصول على نتائج الاختبار الصحيحة.

بريد إلكتروني:
رقم الواتس اب/الهاتف:
Contact Us