EMT Practice Test

1. Question Content...

---

Question1: Refer to the exhibits.

Based on the current HA status, an administrator updates the override and priority parameters on HQ-NGFW-
1 and HQ-NGFW-2 as shown in the exhibit.
What would be the expected outcome in the HA cluster?

Question2: A new administrator is configuring FSSO authentication on FortiGate using DC Agent Mode.
Which step is NOT part of the expected process?

Question3:
Refer to the exhibits.
An administrator configured the Web Filter Profile to block access to all social networking sites except Facebook. However, when users try to access Facebook.com, they are redirected to a FortiGuard web filtering block page.
Based on the exhibits, which configuration change must the administrator make to allow Facebook while blocking all other social networking sites?

Question4: An administrator suspects that the Collector Agent is not forwarding login events to FortiGate.
What is the most effective troubleshooting step?

Question5: Refer to the exhibit.

The NOC team connects to the FortiGate GUI with the NOC_Access admin profile. They request that their GUI sessions do not disconnect too early during inactivity.
What must the administrator configure to answer this specific request from the NOC team?

Question6: Which two statements about equal-cost multi-path (ECMP) configuration on FortiGate are true? (Choose two.)

Question7: Refer to the exhibit.

The predefined deep-inspection and custom-deep-inspection profiles exclude some web categories from SSL inspection, as shown in the exhibit.
For which two reasons are these web categories exempted? (Choose two.)

Question8:
Refer to the exhibits.
You have implemented the application sensor and the corresponding firewall policy as shown in the exhibits.
Which two factors can you observe from these configurations? (Choose two.)

Question9: Refer to the exhibit.

Based on this partial configuration, what are the two possible outcomes when FortiGate enters conserve mode? (Choose two.)

Question10: Which two statements describe characteristics of automation stitches? (Choose two.)

Question11: You are analyzing connectivity problems caused by intermediate devices blocking traffic in SSL VPN environment.
In which two ways can you effectively resolve the problem? (Choose two.)

Question12: Refer to the exhibits.

The exhibits show the system performance output and default configuration of high memory usage thresholds on a FortiGate device.
Based on the system performance output, what are the two possible outcomes? (Choose two.)

Question13: Refer to the exhibit.

The exhibit shows the FortiGuard Category Based Filter section of a corporate web filter profile.
An administrator must block access to download.com, which belongs to the Freeware and Software Downloads category. The administrator must also allow other websites in the same category.
What are two solutions for satisfying the requirement? (Choose two.)

Question14: Refer to the exhibit.

An administrator has created a new firewall address to use as the destination for a static route.
Why is the administrator not able to select the new address in the Destination field of the new static route?

Question15: Refer to the exhibit.

A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come up.
Based on the phase 2 configuration shown in the exhibit, which two configuration changes will bring phase 2 up? (Choose two.)

Question16: Which two statements are correct when FortiGate enters conserve mode? (Choose two.)

Question17: When configuring a FortiGate in a multi-WAN setup, why would an administrator enable session preservation on an interface?

Question18: Which statement correctly describes NetAPI polling mode for the FSSO collector agent?

Question19: What are three key routing principles in SD-WAN? (Choose three.)

Question20: You have configured the below commands on a FortiGate.

What would be the impact of this configuration on FortiGate?