لا تريد أن تفوت شيئا؟

نصائح اجتياز امتحان الشهادة

آخر أخبار الامتحانات ومعلومات الخصم

برعاية وحديثة من قبل خبرائنا

نعم، أرسل لي النشرة الإخبارية

خذ اختبارات أخرى عبر الإنترنت

السؤال #1
When using the SSL certificate inspection method to inspect HTTPS traffic, how does FortiGate filter web requests when the client browser does not provide the server name indication (SNI) extension?
A. FortiGate uses the requested URL from the user’s web browser
B. FortiGate uses the CN information from the Subject field in the server certificate
C. FortiGate blocks the request without any further inspection
D. FortiGate switches to the full SSL inspection method to decrypt the data
عرض الإجابة
اجابة صحيحة: A
السؤال #2
Which statement is true regarding File description (FD) conserve mode?
A. IPS inspection is affected when FortiGate enters FD conserve mode
B. A FortiGate enters FD conserve mode when the amount of available description is less than 5%
C. FD conserve mode affects all daemons running on the device
D. Restarting the WAD process is required to leave FD conserve mode
عرض الإجابة
اجابة صحيحة: C
السؤال #3
Which the following events can trigger the election of a new primary unit in a HA cluster? (Choose two.)
A. Primary unit stops sending HA heartbeat keepalives
B. The FortiGuard license for the primary unit is updated
C. One of the monitored interfaces in the primary unit is disconnected
D. A secondary unit is removed from the HA cluster
عرض الإجابة
اجابة صحيحة: C
السؤال #4
An administrator has configured a FortiGate device with two VDOMs: root and internal. The administrator has also created and inter-VDOM link that connects both VDOMs. The objective is to have each VDOM advertise some routes to the other VDOM via OSPF through the inter-VDOM link. What OSPF configuration settings must match in both VDOMs to have the OSPF adjacency successfully forming? (Choose three.)
A. Router ID
B. OSPF interface area
C. OSPF interface cost
D. OSPF interface MTU
E. Interface subnet mask
عرض الإجابة
اجابة صحيحة: AB
السؤال #5
What conditions are required for two FortiGate devices to form an OSPF adjacency? (Choose three.)
A. IP addresses are in the same subnet
B. Hello and dead intervals match
C. OSPF IP MTUs match
D. OSPF peer IDs match
E. OSPF costs match
عرض الإجابة
اجابة صحيحة: AC
السؤال #6
Which two conditions must be met for a statistic route to be active in the routing table? (Choose two.)
A. The link health monitor (if configured) is up
B. There is no other route, to the same destination, with a higher distance
C. The outgoing interface is up
D. The next-hop IP address is up
عرض الإجابة
اجابة صحيحة: C
السؤال #7
Refer to the exhibit, which contains the partial output of a diagnose command. Based on the output, which two statements are correct? (Choose two.)
A. Anti-replay is enabled
B. DPD is disabled
C. Remote gateway IP is 10
D. Quick mode selectors are disabled
عرض الإجابة
اجابة صحيحة: C
السؤال #8
View the following FortiGate configuration. All traffic to the Internet currently egresses from port1. The exhibit shows partial session information for Internet traffic from a user on the internal network: If the priority on route ID 1 were changed from 5 to 20, what would happen to traffic matching that user’s session?
A. The session would remain in the session table, and its traffic would still egress from port1
B. The session would remain in the session table, but its traffic would now egress from both port1 and port2
C. The session would remain in the session table, and its traffic would start to egress from port2
D. The session would be deleted, so the client would need to start a new session
عرض الإجابة
اجابة صحيحة: A
السؤال #9
An administrator has enabled HA session synchronization in a HA cluster with two members. Which flag is added to a primary unit’s session to indicate that it has been synchronized to the secondary unit?
A. redir
B. dirty
C. synced
D. nds
عرض الإجابة
اجابة صحيحة: AD
السؤال #10
View the exhibit, which contains the output of a diagnose command, and the answer the question below. Which statements are true regarding the Weight value?
A. Its initial value is calculated based on the round trip delay (RTT)
B. Its initial value is statically set to 10
C. Its value is incremented with each packet lost
D. It determines which FortiGuard server is used for license validation
عرض الإجابة
اجابة صحيحة: A
السؤال #11
Which of the following statements is true regarding a FortiGate configured as an explicit web proxy?
A. FortiGate limits the number of simultaneous sessions per explicit web proxy use
B. This limit CANNOT be modified by the administrator
C. FortiGate limits the total number of simultaneous explicit web proxy users
D. FortiGate limits the number of simultaneous sessions per explicit web proxy user The limit CAN be modified by the administrator
E. FortiGate limits the number of workstations that authenticate using the same web proxy user credentials
عرض الإجابة
اجابة صحيحة: B
السؤال #12
Examine the output of the ‘get router info ospf interface’ command shown in the exhibit; then answer the question below. Which statements are true regarding the above output? (Choose two.)
A. The port4 interface is connected to the OSPF backbone area
B. The local FortiGate has been elected as the OSPF backup designated router
C. There are at least 5 OSPF routers connected to the port4 network
D. Two OSPF routers are down in the port4 network
عرض الإجابة
اجابة صحيحة: AC
السؤال #13
Exhibits: Refer to the exhibits, which contain the network topology and BGP configuration for a hub. An administrator is trying to configure ADVPN with a hub-spoke VPN setup using iBGP. All the VPNs are up and connected to the hub. The hub is receiving route information from both spokes over iBGP; however, the spokes are not receiving route information from each other. What change must the administrator make to the hub BGP configuration so that the routes learned by one spoke are forwarded to the other spok
A. Configure an individual neighbor and remove neighbor-range configuration
B. Configure the hub as a route reflector client
C. Change the router id to 10
D. Make the configuration of remote-as different from the configuration of local-as
عرض الإجابة
اجابة صحيحة: BC
السؤال #14
What global configuration setting changes the behavior for content-inspected traffic while FortiGate is in system conserve mode?
A. av-failopen
B. mem-failopen
C. utm-failopen
D. ips-failopen
عرض الإجابة
اجابة صحيحة: BDE
السؤال #15
View the exhibit, which contains a partial routing table, and then answer the question below. Assuming all the appropriate firewall policies are configured, which of the following pings will FortiGate route? (Choose two.)
A. Source IP address 10
B. Source IP address 10
C. Source IP address 10
D. Source IP address 10
عرض الإجابة
اجابة صحيحة: AC
السؤال #16
View the exhibit, which contains an entry in the session table, and then answer the question below. Which one of the following statements is true regarding FortiGate’s inspection of this session?
A. FortiGate applied proxy-based inspection
B. FortiGate forwarded this session without any inspection
C. FortiGate applied flow-based inspection
D. FortiGate applied explicit proxy-based inspection
عرض الإجابة
اجابة صحيحة: A
السؤال #17
View these partial outputs from two routing debug commands: Which outbound interface will FortiGate use to route web traffic from internal users to the Internet?
A. Both port1 and port2
B. port3
C. port1
D. port2
عرض الإجابة
اجابة صحيحة: B
السؤال #18
Which of the following statements are correct regarding application layer test commands? (Choose two.)
A. They are used to filter real-time debugs
B. They display real-time application debugs
C. Some of them display statistics and configuration information about a feature or process
D. Some of them can be used to restart an application
عرض الإجابة
اجابة صحيحة: BC
السؤال #19
Which statement about memory conserve mode is true?
A. A FortiGate exits conserve mode when the configured memory use threshold reaches yellow
B. A FortiGate starts dropping all the new and old sessions when the configured memory use threshold reaches extreme
C. A FortiGate starts dropping new sessions when the configured memory use threshold reaches red
D. A FortiGate enters conserve mode when the configured memory use threshold reaches red
عرض الإجابة
اجابة صحيحة: BC
السؤال #20
Refer to the exhibit, which contains the debug output of diagnose dvm device list. Which two statements about the output shown in the exhibit are correct? (Choose two.)
A. ADOMs are disabled on the FortiManager
B. The FortiGate configuration is in sync with latest running revision history
C. There are pending device-level changes yet to be installed on Local-FortiGate
D. The policy package has been modified for Local-FortiGate
عرض الإجابة
اجابة صحيحة: CD

عرض الإجابات بعد التقديم

يرجى إرسال البريد الإلكتروني الخاص بك والواتس اب للحصول على إجابات الأسئلة.

ملحوظة: يرجى التأكد من صلاحية معرف البريد الإلكتروني وWhatsApp حتى تتمكن من الحصول على نتائج الاختبار الصحيحة.

بريد إلكتروني:
رقم الواتس اب/الهاتف: