السؤال #1

Refer to the exhibit, which shows the output o! the BGP database. Which two statements are correct? (Choose two.)

A. The advertised prefix of 10

B. The first four prefixes are being advertised using a legacy route advertisement

C. The advertised prefix of 10

D. The output shows all prefixes advertised by all neighbors as well as the local router

عرض الإجابة

اجابة صحيحة: AD

السؤال #2

Which two statements about an auxiliary session ate true? (Choose two.)

A. With the auxiliary session selling disabled, only auxiliary sessions are offloaded

B. With the auxiliary session setting enabled

C. With the auxiliary session setting enabled

D. With the auxiliary session setting disabled, for each traffic path

عرض الإجابة

اجابة صحيحة: ABC

السؤال #3

Consider the scenario where the server name indication (SNI) does not match either the common name (CN) or any of the subject alternative names (SAN) in the server certificate. Which action will FortiGate take when using the default settings for SSL certificate inspection?

A. FortiGate uses the SNI from the user's web browser

B. FortiGate closes the connection because this represents an invalid SSL/TLS configuration

C. FortiGate uses the first entry listed in the SAN field in the server certificate

D. FortiGate uses the ZN information from the Subject field in the server certificate

عرض الإجابة

اجابة صحيحة: C

السؤال #4

Which statement about parallel path processing is correct (PPP)?

A. PPP chooses from a group of parallel options lo identity the optimal path tor processing a packet

B. Only FortiGate hardware configurations affect the path that a packet takes

C. PPP does not apply to packets that are part of an already established session

D. Software configuration has no impact on PP

عرض الإجابة

اجابة صحيحة: A

السؤال #5

Refer to the exhibit, which shows the output of a BGP debug command. What can you conclude about the router in this scenario?

A. The router 100

B. An inbound route-map on local router is blocking the prefixes from neighbor 100

C. All of the neighbors displayed are part of a single BGP configuration on the local router with the neighbor-range set to a value of 4

D. The BGP session with peer 10

عرض الإجابة

اجابة صحيحة: D

السؤال #6

Which statement about IKEv2 is true?

A. Both IKEv1 and IKEv2 share the feature of asymmetric authentication

B. IKEv1 and IKEv2 have enough of the header format in common that both versions can run over the same UDP port

C. IKEv1 and IKEv2 use same TCP port but run on different UDP ports

D. IKEv1 and IKEv2 share the concept of phase1 and phase2

عرض الإجابة

اجابة صحيحة: B

السؤال #7

Refer to the exhibit, which shows the partial output of command diagnose debug rating.In this exhibit, which FDS server will the FortiGate algorithm choose?

A. 66

B. 208

C. 209

D. 64

عرض الإجابة

اجابة صحيحة: D

السؤال #8

Exhibit.

A. The first server provided to FortiGate when it performed a DNS query looking for a list of rating servers, was 121

B. There is a natural correlation between the value in the FortiGuard-requests field and the value in the Weight field

C. FortiGate used 64

D. Servers with a negative TZ value are less preferred for rating requests

عرض الإجابة

اجابة صحيحة: B

السؤال #9

Which statement about protocol options is true?

A. Protocol options allow administrators to configure a maximum number of sessions for each configured protocol

B. Protocol options give administrators a streamlined method to instruct FortiGate to block all sessions corresponding to disabled protocols

C. Protocol options allow administrators to configure the Any setting for all enabled protocols, which provides the most efficient use of system resources

D. Protocol options allow administrators to configure which Layer 4 port numbers map to upper-layer protocols, such as HTTP, SMTP, FTP, and so on

عرض الإجابة

اجابة صحيحة: D

السؤال #10

Refer to the exhibit. Which three pieces of information does the diagnose sys top command provide? (Choose three.)

A. The miglogd daemon is running on CPU core ID 0

B. The diagnose sys top command has been running for 18 minutes

C. The miglogd daemon would be on top of the list, if the administrator pressed m on the keyboard

D. The cmdbsvr process is occupying 2

E. If the neweli daemon continues to be in the R state, it will need to be manually restarted

عرض الإجابة

اجابة صحيحة: ABD

السؤال #11

Exhibit.Refer to the exhibit, which shows the output of a diagnose command.What can you conclude about the debug output in this scenario?

A. The first server provided to FortiGate when it performed a DNS query looking for a list of rating servers, was 121

B. There is a natural correlation between the value in the FortiGuard-requests field and the value in the Weight field

C. FortiGate used 64

D. Servers with a negative TZ value are less preferred for rating requests

عرض الإجابة

اجابة صحيحة: B

السؤال #12

Refer to the exhibit, which shows the output o! the BGP database. Which two statements are correct? (Choose two.)

A. The advertised prefix of 10

B. The first four prefixes are being advertised using a legacy route advertisement

C. The advertised prefix of 10

D. The output shows all prefixes advertised by all neighbors as well as the local router

عرض الإجابة

اجابة صحيحة: AD

السؤال #13

Refer to the exhibit. The exhibit shows the output from using the command diagnose debug application samld -1 to diagnose a SAML connection. Based on this output, what can you conclude?

A. Active Directory is used for authentication

B. The authentication request is for an SSL VPN connection

C. The IdP IP address is 10

D. The IdP IP address is 10

عرض الإجابة

اجابة صحيحة: D

السؤال #14

Exhibit.Refer to the exhibit, which contains partial output from an IKE real-time debug. Which two statements about this debug output are correct? (Choose two.)

A. The first server provided to FortiGate when it performed a DNS query looking for a list of rating servers, was 121

B. There is a natural correlation between the value in the FortiGuard-requests field and the value in the Weight field

C. FortiGate used 64

D. Servers with a negative TZ value are less preferred for rating requests

عرض الإجابة

اجابة صحيحة: CD

السؤال #15

Exhibit.

A. Perfect Forward Secrecy (PFS) is enabled in the configuration

B. The local gateway IP address is 10

C. It shows a phase 2 negotiation

D. The initiator provided remote as its IPsec peer Icorrect

عرض الإجابة

اجابة صحيحة: ACD

السؤال #16

Refer to the exhibit, which shows the modified output of the routing kernel. Which statement is true?

A. The egress interface associated with static route 8

B. The default static route through 10

C. The default static route through port2 is in the forwarding information base

D. The BGP route to 10

عرض الإجابة

اجابة صحيحة: D

السؤال #17

Consider the scenario where the server name indication (SNI) does not match either the common name (CN) or any of the subject alternative names (SAN) in the server certificate. Which action will FortiGate take when using the default settings for SSL certificate inspection?

A. FortiGate uses the SNI from the user's web browser

B. FortiGate closes the connection because this represents an invalid SSL/TLS configuration

C. FortiGate uses the first entry listed in the SAN field in the server certificate

D. FortiGate uses the CN information from the Subject field in the server certificate

عرض الإجابة

اجابة صحيحة: D

السؤال #18

Refer to the exhibit, which shows the output of a policy route table entry. Which type of policy route does the output show?

A. An ISDB route

B. A regular policy route

C. A regular policy route, which is associated with an active static route in the FIB

D. An SD - WAN rule

عرض الإجابة

اجابة صحيحة: A

السؤال #19

Refer to the exhibit, which shows the modified output of the routing kernel. Which statement is true?

A. The egress interface associated with static route 8

B. The default static route through 10

C. The default static route through port2 is in the forwarding information base

D. The BGP route to 10

عرض الإجابة

اجابة صحيحة: D

السؤال #20

Consider the scenario where the server name indication (SNI) does not match either the common name (CN) or any of the subject alternative names (SAN) in the server certificate. Which action will FortiGate take when using the default settings for SSL certificate inspection?

A. FortiGate uses the SNI from the user's web browser

B. FortiGate closes the connection because this represents an invalid SSL/TLS configuration

C. FortiGate uses the first entry listed in the SAN field in the server certificate

D. FortiGate uses the ZN information from the Subject field in the server certificate

عرض الإجابة

اجابة صحيحة: C

السؤال #21

Refer to the exhibit, which shows the output of a policy route table entry.

A. An ISDB routecorrect

B. A regular policy route

C. A regular policy route, which is associated with an active static route in the FIB

D. An SD-WAN rule

عرض الإجابة

اجابة صحيحة: A

السؤال #22

Exhibit 1. Exhibit 2. Refer to the exhibits, which show the configuration on FortiGate and partial internet session information from a user on the internal network. An administrator would like to lest session failover between the two service provider connections. Which two changes must the administrator make to force this existing session to immediately start using the other interface? (Choose two.)

A. Change the priority of the port! static route to 11

B. Change the priority of the port2 static route to 5

C. Configure unset snat-route-change to return it to the default setting

D. Configure set snat-route-change enable

عرض الإجابة

اجابة صحيحة: AD

السؤال #23

Exhibit. Refer to the exhibit, which shows two entries that were generated in the FSSO collector agent logs. What three conclusions can you draw from these log entries? {Choose three.)

A. A firewall is blocking traffic to port 139 and 445

B. The user's status shows as "not verified" in the collector agent

C. The FortiGate firmware version is not compatible with that of the collector agent

D. DNS resolution is unable to resolve the workstation name

E. Remote registry is not running on the workstation

عرض الإجابة

اجابة صحيحة: ABE

السؤال #24

Exhibit.Refer to the exhibit, which shows the output of a diagnose command. What can you conclude about the debug output in this scenario?

A. An ISDB route

B. A regular policy route

C. A regular policy route, which is associated with an active static route in the FIB

D. An SD-WAN rule

عرض الإجابة

اجابة صحيحة: B

السؤال #25

Which statement about IKEv2 is true?

A. Both IKEv1 and IKEv2 share the feature of asymmetric authentication

B. IKEv1 and IKEv2 have enough of the header format in common that both versions can run over the same UDP port

C. IKEv1 and IKEv2 use same TCP port but run on different UDP ports

D. IKEv1 and IKEv2 share the concept of phase1 and phase2

عرض الإجابة

اجابة صحيحة: B

السؤال #26

Exhibit.

A. The first server provided to FortiGate when it performed a DNS query looking for a list of rating servers, was 121

B. There is a natural correlation between the value in the FortiGuard-requests field and the value in the Weight field

C. FortiGate used 64

D. Servers with a negative TZ value are less preferred for rating requests

عرض الإجابة

اجابة صحيحة: B

السؤال #27

Refer to the exhibit, which shows the output of the command get router info bgp neighbors 100.64.2.254 advertised-routes. What can you conclude from the output?

A. The BGP state of the two BGP participants is OpenConfirm

B. The router ID of the neighbor is 100

C. The BGP neighbor is advertising the 10

D. The local router is advertising the 10

عرض الإجابة

اجابة صحيحة: D

السؤال #28

Refer to the exhibit, which shows the output of get router info bgp summary. Which two statements are true? (Choose two.)

A. The local ForliGate has received one prefix from BGP neighbor 100

B. The TCP connection with BGP neighbor 100

C. The local FortiGate has received 18 packets from a BGP neighbor

D. The local FortiGate is still calculating the prefixes received from BGP neighbor 100

عرض الإجابة

اجابة صحيحة: AC

السؤال #29

In which two slates is a given session categorized as ephemeral? (Choose two.)

A. A UDP session with only one packet receivedcorrect

B. A UOP session with packets sent and received

C. A TCP session waiting for the SYN ACKcorrect

D. A TCP session waiting for FIN ACK

عرض الإجابة

اجابة صحيحة: AC

السؤال #30

Refer to the exhibit, which shows one way communication of the downstream FortiGate with the upstream FortiGate within a Security Fabric. What three actions must you take to ensure successful communication? (Choose three.)

A. You must authorize the downstream FortiGate on the root FortiGate

B. FortiGate must not be in NAT mode

C. Ensure TCP port 8013 is not blocked along the way

D. You must enable Security Fabric/Fortitelemetry on the receiving interface of the upstream FortiGate

E. Ensure the port for Neighbor Discovery has been changed

عرض الإجابة

اجابة صحيحة: ACD

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان

View The Updated Fortinet Exam Questions

عرض الإجابات بعد التقديم

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع! احصل الان

View The Updated Fortinet Exam Questions

عرض الإجابات بعد التقديم

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان