EMT Practice Test

1. Question Content...

---

Question1: Which two features of IPsec IKEv1 authentication are supported by FortiGate? (Choose two.)

Question2: Which two statements describe how the RPF check is used? (Choose two.)

Question3: Which three methods are used by the collector agent for AD polling? (Choose three.)

Question4: A network administrator has configured an SSL/SSH inspection profile defined for full SSL inspection and set with a private CA certificate. The firewall policy that allows the traffic uses this profile for SSL inspection and performs web filtering. When visiting any HTTPS websites, the browser reports certificate warning errors.
What is the reason for the certificate warning errors?

Question5: When FortiGate performs SSL/SSH full inspection, you can decide how it should react when it detects an invalid certificate.
Which three actions are valid actions that FortiGate can perform when it detects an invalid certificate?
(Choose three.)

Question6: Refer to the exhibits.



The exhibits show a diagram of a FortiGate device connected to the network, as well as the firewall policy and IP pool configuration on the FortiGate device.
Two PCs, PC1 and PC2, are connected behind FortiGate and can access the internet successfully. However, when the administrator adds a third PC to the network (PC3), the PC cannot connect to the internet.
Based on the information shown in the exhibit, which two configuration options can the administrator use to fix the connectivity issue for PC3? (Choose two.)

Question7: An administrator configured a FortiGate to act as a collector for agentless polling mode.
What must the administrator add to the FortiGate device to retrieve AD user group information?

Question8: Refer to the exhibit.

The exhibit shows the FortiGuard Category Based Filter section of a corporate web filter profile.
An administrator must block access to download.com, which belongs to the Freeware and Software Downloads category. The administrator must also allow other websites in the same category.
What are two solutions for satisfying the requirement? (Choose two.)

Question9: The HTTP inspection process in web filtering follows a specific order when multiple features are enabled in the web filter profile.
Which order must FortiGate use when the web filter profile has features such as safe search enabled?

Question10: Which three strategies are valid SD-WAN rule strategies for member selection? (Choose three.)

Question11: Which method allows management access to the FortiGate CLI without network connectivity?

Question12: What is the primary FortiGate election process when the HA override setting is disabled?

Question13: What are two features of collector agent advanced mode? (Choose two.)

Question14: Which three strategies are valid SD-WAN rule strategies for member selection? (Choose three.)

Question15: Which two statements are true regarding FortiGate HA configuration synchronization? (Choose two.)

Question16: Refer to the exhibit showing a FortiGuard connection debug output.

Based on the output, which two facts does the administrator know about the FortiGuard connection? (Choose two.)

Question17: Refer to the exhibits.



The exhibits show a diagram of a FortiGate device connected to the network, and the firewall configuration.
An administrator created a Deny policy with default settings to deny Webserver access for Remote-User2.
The policy should work such that Remote-User1 must be able to access the Webserver while preventing Remote-User2 from accessing the Webserver.
Which two configuration changes can the administrator make to the policy to deny Webserver access for Remote-User2? (Choose two.)

Question18: Which two features of IPsec IKEv1 authentication are supported by FortiGate? (Choose two.)

Question19: Refer to the exhibits, which show the firewall policy and an antivirus profile configuration.

Why is the user unable to receive a block replacement message when downloading an infected file for the first time?

Question20: Which two statements about equal-cost multi-path (ECMP) configuration on FortiGate are true? (Choose two.)

Question21: An administrator configures FortiGuard servers as DNS servers on FortiGate using default settings.
What is true about the DNS connection to a FortiGuard server?

Question22: Refer to the exhibit.

Which statement about this firewall policy list is true?

Question23: A network administrator is configuring an IPsec VPN tunnel for a sales employee travelling abroad.
Which IPsec Wizard template must the administrator apply?

Question24: Refer to the exhibits.


The exhibits show the application sensor configuration and the Excessive-Bandwidth and Apple filter details.
Based on the configuration, what will happen to Apple FaceTime if there are only a few calls originating or incoming?