لا تريد أن تفوت شيئا؟

نصائح اجتياز امتحان الشهادة

آخر أخبار الامتحانات ومعلومات الخصم

برعاية وحديثة من قبل خبرائنا

نعم، أرسل لي النشرة الإخبارية

خذ اختبارات أخرى عبر الإنترنت

السؤال #1
Examine the output from the ‘diagnose vpn tunnel list’ command shown in the exhibit; then answer the question below. Which command can be used to sniffer the ESP traffic for the VPN DialUP_0?
A. diagnose sniffer packet any ‘port 500’
B. diagnose sniffer packet any ‘esp’
C. diagnose sniffer packet any ‘host 10
D. diagnose sniffer packet any ‘port 4500’
عرض الإجابة
اجابة صحيحة: A
السؤال #2
View the exhibit, which contains the partial output of a diagnose command, and then answer the question below. Based on the output, which of the following statements is correct?
A. Anti-reply is enabled
B. DPD is disabled
C. Quick mode selectors are disabled
D. Remote gateway IP is 10
عرض الإجابة
اجابة صحيحة: C
السؤال #3
What events are recorded in the crashlogs of a FortiGate device? (Choose two.)
A. A process crash
B. Configuration changes
C. Changes in the status of any of the FortiGuard licenses
D. System entering to and leaving from the proxy conserve mode
عرض الإجابة
اجابة صحيحة: BC
السؤال #4
Examine the following traffic log; then answer the question below. date-20xx-02-01 time=19:52:01 devname=master device_id="xxxxxxx" log_id=0100020007 type=event subtype=system pri critical vd=root service=kemel status=failure msg="NAT port is exhausted." What does the log mean?
A. There is not enough available memory in the system to create a new entry in the NAT port table
B. The limit for the maximum number of simultaneous sessions sharing the same NAT port has been reached
C. FortiGate does not have any available NAT port for a new connection
D. The limit for the maximum number of entries in the NAT port table has been reached
عرض الإجابة
اجابة صحيحة: A
السؤال #5
A FortiGate's portl is connected to a private network. Its port2 is connected to the Internet. Explicit web proxy is enabled in port1 and only explicit web proxy users can access the Internet. Web cache is NOT enabled. An internal web proxy user is downloading a file from the Internet via HTTP. Which statements are true regarding the two entries in the FortiGate session table related with this traffic? (Choose two.)
A. Both session have the local flag on
B. The destination IP addresses of both sessions are IP addresses assigned to FortiGate's interfaces
C. One session has the proxy flag on, the other one does not
D. One of the sessions has the IP address of port2 as the source IP address
عرض الإجابة
اجابة صحيحة: B
السؤال #6
When does a RADIUS server send an Access-Challenge packet?
A. The server does not have the user credentials yet
B. The server requires more information from the user, such as the token code for two-factor authentication
C. The user credentials are wrong
D. The user account is not found in the server
عرض الإجابة
اجابة صحيحة: AD
السؤال #7
Examine the partial output from two web filter debug commands; then answer the question below: Based on the above outputs, which is the FortiGuard web filter category for the web site www.fgt99.com?
A. Finance and banking
B. General organization
C. Business
D. Information technology
عرض الإجابة
اجابة صحيحة: BC
السؤال #8
View the global IPS configuration, and then answer the question below. Which of the following statements is true regarding this configuration?
A. IPS will scan every byte in every session
B. FortiGate will spawn IPS engine instances based on the system load
C. New packets will be passed through without inspection if the IPS socket buffer runs out of memory
D. IPS will use the faster matching algorithm which is only available for units with more than 4 GB memory
عرض الإجابة
اجابة صحيحة: C
السؤال #9
Refer to the exhibit, which contains the output of diagnose sys session list. If the HA ID for the primary unit is zero (0), which statement about the output is true?
A. This session cannot be synced with the slave unit
B. The inspection of this session has been offloaded to the slave unit
C. The master unit is processing this traffic
D. This session is for HA heartbeat traffic
عرض الإجابة
اجابة صحيحة: B
السؤال #10
Refer to the exhibit, which contains partial output from an IKE real-time debug. Which two statements about this debug output are correct? (Choose two.)
A. The remote gateway IP address is 10
B. The initiator provided remote as its IPsec peer ID
C. It shows a phase 1 negotiation
D. The negotiation is using AES128 encryption with CBC hash
عرض الإجابة
اجابة صحيحة: C

عرض الإجابات بعد التقديم

يرجى إرسال البريد الإلكتروني الخاص بك والواتس اب للحصول على إجابات الأسئلة.

ملحوظة: يرجى التأكد من صلاحية معرف البريد الإلكتروني وWhatsApp حتى تتمكن من الحصول على نتائج الاختبار الصحيحة.

بريد إلكتروني:
رقم الواتس اب/الهاتف: