السؤال #1

You are automating configuration changes on one of the FortiGate VMs using Linux Red Hat Ansible.How does Linux Red Hat Ansible connect to FortiGate to make the configuration change?

A. It uses a YAML file

B. It uses a FortiGate VIP

C. It uses an API

D. It uses SSH

عرض الإجابة

اجابة صحيحة: C

السؤال #2

A DevOps team is using Terraform to manage their infrastructure across multiple environments.Currently, the Terraform state file is stored locally on a developer's machine. The team decides to migrate the state file to a remote back-end machine.Why is storing the Terraform state file in a remote location considered a best practice in this scenario?

A. t ensures that the state file is encrypted

B. t eliminates the need to define provider configurations in the state file

C. t enables collaboration among multiple team members

D. t prevents the accidental deletion of the state file

عرض الإجابة

اجابة صحيحة: C

السؤال #3

Refer to the exhibit.What is the purpose of this section of an Azure Bicep file?

A. To restrict which FortiOS versions are accepted for deployment

B. To indicate the correct FortiOS upgrade path after deployment

C. To add a comment with the permitted FortiOS versions that can be deployed

D. To document the FortiOS versions in the resulting topology

عرض الإجابة

اجابة صحيحة: A

السؤال #4

You must add an Amazon Web Services (AWS) network access list (NACL) rule to allow SSH traffic to a subnet for temporary testing purposes.When you review the current inbound and outbound NACL rules, you notice that the rules with number 5 deny SSH and telnet traffic to the subnet.What can you do to allow SSH traffic?

A. You do not have to create any NACL rules because the default security group rule automatically allows SSH traffic to the subnet

B. You must create a new allow SSH rule anywhere in the network ACL rule base to allow SSH traffic

C. You must create two new allow SSH rules, each with a number bigger than 5

D. You must create two new allow SSH rules, each with a number smaller than 5

عرض الإجابة

اجابة صحيحة: D

السؤال #5

You are using Ansible to modify the configuration of several FortiGate VMs.What is the minimum number of files you need to create, and in which file should you configure the target FortiGate IP addresses?

A. One playbook file for each target and the required tasks, and one inventory file

B. One

C. One inventory file for each target device, and one playbook file

D. One text file for all target devices, and one playbook file

عرض الإجابة

اجابة صحيحة: D

السؤال #6

Refer to the exhibit.Refer to the exhibit.The exhibit shows an active-passive high availability FortiGate pair with external and internal Azure load balancers.There is no SDN connector used in this solution.Which configuration must the administrator implement on each FortiGate?

A. Single BGP route to Azure probe IP address

B. One static route to Azure Lambda IP address

C. Two static routes to Azure probe IP address

D. Two BGP routes to Azure probe IP address

عرض الإجابة

اجابة صحيحة: C

السؤال #7

An AWS administrator must ensure that each member of the cloud deployment team has the correct permissions to deploy and manage resources using CloudFormation. The administrator is researching which tasks must be executed with CloudFormation and therefore require CloudFormation permissions.Which task is run using CloudFormation?

A. Installing a Helm chart to deploy a FortiWeb ingress controller in an EKS cluster

B. Creating an EKS cluster with the eksctl create cluster command

C. Changing the number of nodes in a EKS cluster from AWS CloudShell

D. Deploying a new pod with a service in an Elastic Kubernetes Service (EKS) cluster using the kubectl command

عرض الإجابة

اجابة صحيحة: A

السؤال #8

Refer to the exhibit.The exhibit shows an active-passive high availability FortiGate pair with external and internal Azure load balancers There is no SDN connector used in this solution.Which configuration must the administrator implement on each FortiGate?

A. Single BGP route to Azure probe IP address

B. One static route to Azure Lambda IP address

C. Two static routes to Azure probe IP address

D. Two BGP routes lo Azure probe IP address

عرض الإجابة

اجابة صحيحة: C

السؤال #9

Refer to the exhibit.An administrator deployed an HA active-active load balance sandwich in Microsoft Azure. The setup requires configuration synchronization between devices.What can you conclude from the configured settings shown in the exhibit? (Choose two.)

A. FortiGate A and FortiGate B are two independent devices

B. By default, FortiGate uses FGCP

C. It does not synchronize the FortiGate hostname

D. FortiGate-VM instances are scaled out automatically according to predefined workload levels

عرض الإجابة

اجابة صحيحة: BC

السؤال #10

You must add an Amazon Web Services (AWS) network access list (NACL) rule to allow SSH traffic to a subnet for temporary testing purposes.When you review the current inbound and outbound NACL rules, you notice that the rules with number 5 deny SSH and Telnet traffic to the subnet.What can you do to allow SSH traffic?

A. You do not have to create any NACL rules because the default security group rule automatically allows SSH traffic to the subnet

B. You must create a new allow SSH rule anywhere in the network ACL rule base to allow SSH traffic

C. You must create two new allow SSH rules, each with a number bigger than 5

D. You must create two new allow SSH rules, each with a number smaller than 5

عرض الإجابة

اجابة صحيحة: D

السؤال #11

Refer to the exhibit.You are tasked to deploy a FortiGate VM with private and public subnets in Amazon Web Services (AWS). You examined the variables.tf file. Assume that all the other terraform files are in place.What will be the final result after running the terraform init and terraform apply commands?

A. Terraform will deploy a FortiGate VM in the eu-West-1 region with private and public subnets

B. Terraform will deploy a FortiGate VM in the eu-West-1a availability zone without any subnets

C. Terraform will not deploy a FortiGate VM

D. Terraform will deploy a FortiGate VM in the eu-West-1a availability zone with two subnets and BYOL license

عرض الإجابة

اجابة صحيحة: D

السؤال #12

An Azure administration team is looking for a FortiGate high availability (HA) solution that is able to:- Filter east-west traffic- Filter north-south traffic- Scale up- Scale outWhich HA deployment meets all of the requirements?

A. ctive-active with Azure Gateway load balancer

B. ctive-active with external and internal load balancers

C. ctive-passive with external and internal load balancers

D. ctive-passive with SDN connector

عرض الإجابة

اجابة صحيحة: B

السؤال #13

Refer to the exhibit. An administrator installed a FortiWeb ingress controller to protect a containerized web application.What is the reason for the status shown in FortiView?

A. he FortiWeb VM is missing a route to the node subnet

B. he SDN connector is not authenticated correctly

C. he load balancing type is not set to round-robin

D. he manifest file deployed is configured with the wrong node IP addresses

عرض الإجابة

اجابة صحيحة: A

السؤال #14

An administrator would like to use FortiCNP to keep track of sensitive data files located in the Amazon Web Services (AWS) S3 bucket and protect it from malware.Which FortiCNP feature should the administrator use?

A. FortiCNP Threat Detection policies

B. FortiCNP Risk Management policies

C. FortiCNP Data Scan policies

D. FortiCNP Compliance policies

عرض الإجابة

اجابة صحيحة: C

السؤال #15

You have deployed a FortiGate HA cluster in Azure using a Gateway Load Balancer for traffic inspection. However, traffic is not being routed correctly through the firewalls.What can be the cause of the issue?

A. he Gateway Load Balancer is not associated with the correct network security group (NSG) rules, which allow traffic to pass through

B. he protected VMs are in a different Azure subscription, which prevents the Gateway Load Balancer from forwarding traffic

C. he health probes for the Gateway Load Balancer are failing, which causes traffic to bypass the HA cluster

D. he Fortinet VMs have IP forwarding disabled, which is required for traffic inspection

عرض الإجابة

اجابة صحيحة: D

السؤال #16

Your administrator instructed you to deploy an Azure vWAN solution to create a connection between the main company site and branch sites to the other company VNETs. What is the best connection solution available between your company headquarters, branch sites, and the Azure vWAN hub? (Choose one answer)

A. An L2TP connection

B. SSL VPN connections

C. GRE tunnels

D. ExpressRoute

عرض الإجابة

اجابة صحيحة: D

السؤال #17

Refer to the exhibit.The exhibit shows an active-passive high availability FortiGate pair with external and internal Azure load balancers There is no SDN connector used in this solution.Which configuration must the administrator implement on each FortiGate?

A. Single BGP route to Azure probe IP address

B. One static route to Azure Lambda IP address

C. Two static routes to Azure probe IP address

D. Two BGP routes lo Azure probe IP address

عرض الإجابة

اجابة صحيحة: C

السؤال #18

Refer to the exhibit.The exhibit shows an active-passive high availability FortiGate pair with external and internal Azure load balancers There is no SDN connector used in this solution.Which configuration must the administrator implement on each FortiGate?

A. Single BGP route to Azure probe IP address

B. One static route to Azure Lambda IP address

C. Two static routes to Azure probe IP address

D. Two BGP routes lo Azure probe IP address

عرض الإجابة

اجابة صحيحة: C

السؤال #19

Your DevOps team is evaluating different Infrastructure as Code (IaC) solutions for deploying complex Azure environments.What is an advantage of choosing Azure Bicep over other IaC tools available?

A. Azure Bicep generates deployment logs that are optimized to improve error handling

B. Azure Bicep provides immediate support for all Azure services, including those in preview

C. Azure Bicep requires less frequent schema updates than Azure Resource Manager (ARM) templates

D. Azure Bicep can reduce deployment costs by limiting resource utilization during testing

عرض الإجابة

اجابة صحيحة: B

السؤال #20

An organization is deploying FortiDevSec to enhance security for containerized applications, and they need to ensure containers are monitored for suspicious behavior at runtime.Which FortiDevSec feature is best for detecting runtime threats?

A. FortiDevSec software composition analysis (SCA)

B. FortiDevSec static application security testing (SAST)

C. FortiDevSec dynamic application security testing (DAST)

D. FortiDevSec container scanner

عرض الإجابة

اجابة صحيحة: D

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان

View The Updated Fortinet Exam Questions

عرض الإجابات بعد التقديم

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع! احصل الان

View The Updated Fortinet Exam Questions

عرض الإجابات بعد التقديم

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان