السؤال #1

Which two statements about bulk configuration changes made using FortiManager CLI scripts are correct? (Choose two.)

A. hen run on the All FortiGate in ADOM, changes are automatically installed without the creation of a new revision history

B. hen run on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation

C. hen run on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate device

D. hen run on the Policy Package, ADOM database, changes are applied directly to the managed FortiGate device

عرض الإجابة

اجابة صحيحة: BC

السؤال #2

What is the diagnose test application ipsmonitor 5 command used for?

A. o enable IPS bypass mode

B. o disable the IPS engine

C. o provide information regarding IPS sessions

D. o restart all IPS engines and monitors

عرض الإجابة

اجابة صحيحة: A

السؤال #3

Which two statements about application layer test commands are true? (Choose two.)

A. hey display real-time application debugs

B. ome of them display statistics and configuration information about a feature or process

C. ome of them can be used to restart an application

D. hey are used to filter real-time debugs

عرض الإجابة

اجابة صحيحة: BC

السؤال #4

Which two statements about an auxiliary session are true? (Choose two.)

A. ith the auxiliary session setting enabled, ECMP traffic is accelerated to the NP6 processor

B. ith the auxiliary session setting disabled, only auxiliary sessions will be offloaded

C. ith the auxiliary session setting enabled, two sessions will be created in case of routing change

D. ith the auxiliary session setting disabled, for each traffic path, FortiGate will use the same auxiliary session

عرض الإجابة

اجابة صحيحة: AC

السؤال #5

Which three conditions are required for two FortiGate devices to form an OSPF adjacency? (Choose three.)

A. SPF costs match

B. SPF peer IDs match

C. ello and dead intervals match

D. P addresses are in the same subnet

E. SPF IP MTUs match

عرض الإجابة

اجابة صحيحة: CDE

السؤال #6

Which statement about protocol options is true?

A. rotocol options allows administrators a streamlined method to instruct FortiGate to block all sessions corresponding to disabled protocols

B. rotocol options allow administrators to configure a maximum number of sessions for each configured protocol

C. rotocol options allows administrators to configure which Layer 4 port numbers map to upper-layer protocols, such as HTTP, SMTP, FTP, and so on

D. rotocol options allows administrators the ability to configure the Any setting for all enabled protocols which provides the most efficient use of system resources

عرض الإجابة

اجابة صحيحة: C

السؤال #7

Which two configuration commands change the default behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.)

A. et av-failopen off

B. et av-failopen pass

C. et fail-open enable

D. et ips fail-open disable

عرض الإجابة

اجابة صحيحة: AC

السؤال #8

Which two tasks are automated using the Import Configuration wizard on FortiManager? (Choose two.)

A. mporting interface mappings from managed devices

B. mporting static and dynamic route configurations from managed devices

C. mporting firewall address objects from managed devices

D. mporting devices to FortiManager

عرض الإجابة

اجابة صحيحة: AC

السؤال #9

Which two statements about the Security Fabric are true? (Choose two.)

A. nly FortiGate devices with fabric-object-unification set to default will receive and synchronize global CMDB objects sent by the root FortiGate

B. nly the root FortiGate collects network topology information and forwards it to FortiAnalyzer

C. nly the root FortiGate sends logs to FortiAnalyzer

D. ortiGate uses FortiTelemetry protocol to communicate with FortiAnalyzer

عرض الإجابة

اجابة صحيحة: AB

السؤال #10

What does the dirty flag mean in a FortiGate session configured for NGFW policy mode?

A. he URL category for this session has been updated by FortiGuard and the session needs to be checked against the policy again to ensure proper web filtering is applied

B. he application or URL category is unknown and needs to be rescanned by the IPS engine to try to identify the Layer 7 details

C. raffic has been identified as coming from an application that is not allowed and the relevant replacement message needs to be displayed to the user, if configured

D. he existing session table entry has been updated with the app_id and the firewall policy table needs to be checked for a match

عرض الإجابة

اجابة صحيحة: D

عرض الإجابات بعد التقديم

يرجى إرسال البريد الإلكتروني الخاص بك والواتس اب للحصول على إجابات الأسئلة.

ملحوظة: يرجى التأكد من صلاحية معرف البريد الإلكتروني وWhatsApp حتى تتمكن من الحصول على نتائج الاختبار الصحيحة.

بريد إلكتروني:

رقم الواتس اب/الهاتف:

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان

عرض الإجابات بعد التقديم

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع! احصل الان

عرض الإجابات بعد التقديم

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان