لا تريد أن تفوت شيئا؟

نصائح اجتياز امتحان الشهادة

آخر أخبار الامتحانات ومعلومات الخصم

برعاية وحديثة من قبل خبرائنا

نعم، أرسل لي النشرة الإخبارية

خذ اختبارات أخرى عبر الإنترنت

السؤال #1
You are experiencing intermittent connectivity issues in a FortiGate HA cluster deployed with Azure gateway load balancer. Traffic is being dropped when it passes through the cluster.What is the cause of the issue?
A. he protected VMs are running an application that fragments packets
B. he Azure gateway load balancer is blocking large packets, causing traffic failures
C. he FortiGate firewalls are using the default maximum transmission unit (MTU) size supported by Azure
D. he Azure gateway load balancer is configured with an incorrect health probe port
عرض الإجابة
اجابة صحيحة: C
السؤال #2
A VM in Azure is failing to communicate with other VMs in the same subnet.What is the most likely cause?
A. Some of the VMs are beyond your allowed quota for the Azure region
B. There is at least one user-defined route blocking traffic within the subnet
C. The VMs do not have a public IP address configured
D. A network security group (NSG) has overridden the default intrasubnet communication rule
عرض الإجابة
اجابة صحيحة: D
السؤال #3
Your DevOps team is evaluating different Infrastructure as Code (IaC) solutions for deploying complex Azure environments.What is an advantage of choosing Azure Bicep over other IaC tools available?
A. Azure Bicep generates deployment logs that are optimized to improve error handling
B. Azure Bicep provides immediate support for all Azure services, including those in preview
C. Azure Bicep requires less frequent schema updates than Azure Resource Manager (ARM) templates
D. Azure Bicep can reduce deployment costs by limiting resource utilization during testing
عرض الإجابة
اجابة صحيحة: B
السؤال #4
Refer to the exhibit.Refer to the exhibit.The exhibit shows an active-passive high availability FortiGate pair with external and internal Azure load balancers.There is no SDN connector used in this solution.Which configuration must the administrator implement on each FortiGate?
A. Single BGP route to Azure probe IP address
B. One static route to Azure Lambda IP address
C. Two static routes to Azure probe IP address
D. Two BGP routes to Azure probe IP address
عرض الإجابة
اجابة صحيحة: C
السؤال #5
You are using Ansible to modify the configuration of several FortiGate VMs.What is the minimum number of files you need to create, and in which file should you configure the target FortiGate IP addresses?
A. One playbook file for each target and the required tasks, and one inventory file
B. One
C. One inventory file for each target device, and one playbook file
D. One text file for all target devices, and one playbook file
عرض الإجابة
اجابة صحيحة: B
السؤال #6
You must add an Amazon Web Services (AWS) network access list (NACL) rule to allow SSH traffic to a subnet for temporary testing purposes.When you review the current inbound and outbound NACL rules, you notice that the rules with number 5 deny SSH and telnet traffic to the subnet.What can you do to allow SSH traffic?
A. You do not have to create any NACL rules because the default security group rule automatically allows SSH traffic to the subnet
B. You must create a new allow SSH rule anywhere in the network ACL rule base to allow SSH traffic
C. You must create two new allow SSH rules, each with a number bigger than 5
D. You must create two new allow SSH rules, each with a number smaller than 5
عرض الإجابة
اجابة صحيحة: D
السؤال #7
An administrator would like to use FortiCNP to keep track of sensitive data files located in the Amazon Web Services (AWS) S3 bucket and protect it from malware.Which FortiCNP feature should the administrator use?
A. FortiCNP Threat Detection policies
B. FortiCNP Risk Management policies
C. FortiCNP Data Scan policies
D. FortiCNP Compliance policies
عرض الإجابة
اجابة صحيحة: C
السؤال #8
You must add an Amazon Web Services (AWS) network access list (NACL) rule to allow SSH traffic to a subnet for temporary testing purposes.When you review the current inbound and outbound NACL rules, you notice that the rules with number 5 deny SSH and telnet traffic to the subnet.What can you do to allow SSH traffic?
A. You do not have to create any NACL rules because the default security group rule automatically allows SSH traffic to the subnet
B. You must create a new allow SSH rule anywhere in the network ACL rule base to allow SSH traffic
C. You must create two new allow SSH rules, each with a number bigger than 5
D. You must create two new allow SSH rules, each with a number smaller than 5
عرض الإجابة
اجابة صحيحة: D
السؤال #9
An administrator would like to use FortiCNP to keep track of sensitive data files located in the Amazon Web Services (AWS) S3 bucket and protect it from malware.Which FortiCNP feature should the administrator use?
A. FortiCNP Threat Detection policies
B. FortiCNP Risk Management policies
C. FortiCNP Data Scan policies
D. FortiCNP Compliance policies
عرض الإجابة
اجابة صحيحة: C
السؤال #10
An administrator decides to use the Use managed identity option on the FortiGate SDN connector with Microsoft Azure. However, the SDN connector is failing on the connection. What must the administrator do to correct this issue?
A. ake sure to set the type to system managed identity on FortiGate SDN connector settings
B. ake sure to add the Tenant ID on the FortiGate side of the configuration
C. ake sure to enable the system-assigned managed identity on Azure
D. ake sure to add the Client Secret on the FortiGate side of the configuration
عرض الإجابة
اجابة صحيحة: C
السؤال #11
An administrator is trying to implement FortiCNP with Microsoft Azure Security integration.However, FortiCNP is not able to extract any cloud integration data from Azure; therefore, real- time cloud security monitoring is not possible.What is causing this issue?
A. he administrator enabled the wrong Defender plan for servers
B. he Azure account doesn't have the Global Administrator role
C. he FortiCNP account in Azure has the Storage Blob Data Reader role
D. he organization is using a free Azure AD license
عرض الإجابة
اجابة صحيحة: C
السؤال #12
You must add an Amazon Web Services (AWS) network access list (NACL) rule to allow SSH traffic to a subnet for temporary testing purposes.When you review the current inbound and outbound NACL rules, you notice that the rules with number 5 deny SSH and Telnet traffic to the subnet.What can you do to allow SSH traffic?
A. You do not have to create any NACL rules because the default security group rule automatically allows SSH traffic to the subnet
B. You must create a new allow SSH rule anywhere in the network ACL rule base to allow SSH traffic
C. You must create two new allow SSH rules, each with a number bigger than 5
D. You must create two new allow SSH rules, each with a number smaller than 5
عرض الإجابة
اجابة صحيحة: D
السؤال #13
You need a solution to safeguard public cloud-hosted web applications from the OWASP Top 10 vulnerabilities. The solution must support the same region in which your applications reside, with minimum traffic cost.Which solution meets the requirements?
A. se FortiCNP
B. se FortiWeb
C. se FortiADC
D. se FortiGate
عرض الإجابة
اجابة صحيحة: B
السؤال #14
Refer to the exhibit. Your team notices an unusually high volume of traffic sourced at one of the organizations FortiGate EC2 instances. They create a flow log to obtain and analyze detailed information about this traffic. However, when they checked the log, they found that it included traffic that was not associated with the FortiGate instance in question.What can they do to obtain the correct logs?
A. nsure that the flow log data is not mixed with the rest of the traffic
B. reate a new flow log at the interface level
C. end the logs to Amazon Data Firehose instead to get more granular information
D. hange the maximum aggregation time to 1 minute
عرض الإجابة
اجابة صحيحة: B
السؤال #15
Refer to the exhibit. The exhibit shows partial output of changes that AWS found after you created a new change set.What can you conclude from this output if you decide to execute this change set?
A. xecuting this change set will create a new VM, unless you do not have proper permissions
B. esources deployed successfully will remain, even if other resources fail during execution
C. loudFormation will check your account quota before executing the change set, to prevent errors
D. ou should refer to the AWS documentation to prevent unplanned service interruptions
عرض الإجابة
اجابة صحيحة: D
السؤال #16
Your DevOps team is evaluating different Infrastructure as Code (IaC) solutions for deploying complex Azure environments.What is an advantage of choosing Azure Bicep over other IaC tools available?
A. Azure Bicep generates deployment logs that are optimized to improve error handling
B. Azure Bicep provides immediate support for all Azure services, including those in preview
C. Azure Bicep requires less frequent schema updates than Azure Resource Manager (ARM) templates
D. Azure Bicep can reduce deployment costs by limiting resource utilization during testing
عرض الإجابة
اجابة صحيحة: B
السؤال #17
Your DevOps team is evaluating different Infrastructure as Code (IaC) solutions for deploying complex Azure environments.What is an advantage of choosing Azure Bicep over other IaC tools available?
A. Azure Bicep generates deployment logs that are optimized to improve error handling
B. Azure Bicep provides immediate support for all Azure services, including those in preview
C. Azure Bicep requires less frequent schema updates than Azure Resource Manager (ARM) templates
D. Azure Bicep can reduce deployment costs by limiting resource utilization during testing
عرض الإجابة
اجابة صحيحة: B
السؤال #18
Your DevOps team is evaluating different Infrastructure as Code (IaC) solutions for deploying complex Azure environments.What is an advantage of choosing Azure Bicep over other IaC tools available?
A. Azure Bicep generates deployment logs that are optimized to improve error handling
B. Azure Bicep provides immediate support for all Azure services, including those in preview
C. Azure Bicep requires less frequent schema updates than Azure Resource Manager (ARM) templates
D. Azure Bicep can reduce deployment costs by limiting resource utilization during testing
عرض الإجابة
اجابة صحيحة: B
السؤال #19
An Azure administrator is trying to optimize the Azure Bicep files currently used for cloud deployments.Which technique can Azure administrators use to improve the code in Azure Bicep files?
A. Use the what-if operation before deploying new resources
B. Avoid nesting related resources to improve readability
C. Always use parameter files with the
D. Limit the allowed parameters with the use of decorators
عرض الإجابة
اجابة صحيحة: D
السؤال #20
How does an administrator secure container environments in Amazon AWS from newly emerged security threats?
A. Using Amazon AWS-related application control signatures
B. Using Docker-related application control signatures
C. Using distributed network-related application control signatures
D. Using Amazon AWS_S3-related application control signatures
عرض الإجابة
اجابة صحيحة: B
السؤال #21
You are automating configuration changes on one of the FortiGate VMs using Linux Red Hat Ansible.How does Linux Red Hat Ansible connect to FortiGate to make the configuration change?
A. t uses a FortiGate VIP
B. t uses an API
C. t uses SSH
D. t uses a YAML file
عرض الإجابة
اجابة صحيحة: B

View The Updated Fortinet Exam Questions

SPOTO Provides 100% Real Fortinet Exam Questions for You to Pass Your Fortinet Exam!

عرض الإجابات بعد التقديم

يرجى إرسال البريد الإلكتروني الخاص بك والواتس اب للحصول على إجابات الأسئلة.

ملحوظة: يرجى التأكد من صلاحية معرف البريد الإلكتروني وWhatsApp حتى تتمكن من الحصول على نتائج الاختبار الصحيحة.

بريد إلكتروني:
رقم الواتس اب/الهاتف:
Contact Us