EMT Practice Test

1. Question Content...

---

Question1: Which of the following options can you use to update the virus definitions on a FortiGate unit? (Select all that apply.)

Question2: Which statement regarding the firewall policy authentication timeout is true?

Question3: Which of the following statements is correct regarding a FortiGate unit operating in NAT/Route mode?

Question4: When browsing to an internal web server using a web-mode SSL VPN bookmark, from which of the following source IP addresses would the web server consider the HTTP request to be initiated?

Question5: Which of the following sequences describes the correct order of criteria used for the selection of a master unit within a FortiGate high availability (HA) cluster when override is disabled?

Question6: Which of the following statements regarding the firewall policy authentication timeout is true?

Question7: How many packets are interchanged between both IPSec ends during the negotiation of a main- mode phase 1?

Question8: Because changing the operational mode to Transparent resets device (or vdom) to all defaults, which precautions should an Administrator take prior to performing this? (Select all that apply.)

Question9: Two FortiGate devices fail to form an HA cluster, the device hostnames are STUDENT and REMOTE.
Exhibit A shows the command output of show system ha for the STUDENT device. Exhibit B shows the command output of show system ha for the REMOTE device.
Exhibit A:

Exhibit B

Which one of the following is the most likely reason that the cluster fails to form?

Question10: Which of the following statements are true of the FortiGate unit's factory default configuration?

Question11: In which order are firewall policies processed on a FortiGate unit?

Question12: Two devices are in an HA cluster, the device hostnames are STUDENT and REMOTE. Exhibit A shows the command output of diagnose sys session stat for the STUDENT device. Exhibit B shows the command output of diagnose sys session stat for the REMOTE device.
Exhibit A:

Exhibit B:

Given the information provided in the exhibits, which of the following statements are correct? (Choose two.)

Question13: Which of the following actions that can be taken by the Data Leak Prevention scanning? (Choose three.)

Question14: In transparent mode, forward-domain is an CLI setting associate with ___________.

Question15: Examine the following spanning tree configuration on a FortiGate in transparent mode:

Which statement is correct for the above configuration?

Question16: An administrator wants to create an IPsec VPN tunnel between two FortiGate devices. Which three configuration steps must be performed on both units to support this scenario? (Choose three.)

Question17: Caching improves performance by reducing FortiGate unit requests to the FortiGuard server. Which of the following statements are correct regarding the caching of FortiGuard responses? (Select all that apply.)

Question18: Which statements are true regarding local user authentication? (Choose two.)

Question19: When firewall policy authentication is enabled, only traffic on supported protocols will trigger an authentication challenge.
Select all supported protocols from the following:

Question20: Which of the following FSSO modes must be used for Novell eDirectory networks?

Question21: In which order are firewall policies processed on the FortiGate unit?

Question22: The FortiGate port1 is connected to the Internet. The FortiGate port2 is connected to the internal network.
Examine the firewall configuration shown in the exhibit; then answer the question below.

Based on the firewall configuration illustrated in the exhibit, which statement is correct?

Question23: Which of the following statements are true regarding Local User Authentication? (Select all that apply.)

Question24: Which is an advantage of using SNMP v3 instead of SNMP v1/v2 when querying a FortiGate unit?

Question25: Which statements are correct regarding an IPv6 over IPv4 IPsec configuration? (Choose two.)

Question26: Review the IPsec diagnostics output of the command diagnose vpn tunnel list shown in the exhibit below.

Which statements are correct regarding this output? (Choose two.)

Question27: Identify the statement which correctly describes the output of the following command:
diagnose ips anomaly list

Question28: An issue could potentially occur when clicking Connect to start tunnel mode SSL VPN. The tunnel will start up for a few seconds, then shut down.
Which of the following statements best describes how to resolve this issue?

Question29: Regarding the use of web-only mode SSL VPN, which statement is correct?

Question30: Which of the following are valid authentication user group types on a FortiGate unit? (Select all that apply.)

Question31: Which of the following items is NOT a packet characteristic matched by a firewall service object?

Question32: Which of the following IPsec configuration modes can be used when the FortiGate is running in NAT mode?

Question33: Which email filter is NOT available on a FortiGate device?

Question34: Which of the following pieces of information can be included in the Destination Address field of a firewall policy? (Select all that apply.)

Question35: What are the valid sub-types for a Firewall type policy? (Select all that apply)

Question36: How is traffic routed onto an SSL VPN tunnel from the FortiGate unit side?

Question37: What logging options are supported on a FortiGate unit? (Choose two.)

Question38: The order of the firewall policies is important. Policies can be re-ordered from either the GUI or the CLI.
Which CLI command is used to perform this function?

Question39: Examine the following log message attributes and select two correct statements from the list below.
(Choose two.)
hostname=www.youtube.com profiletype="Webfilter_Profile" profile="default" status="passthrough" msg="URL belongs to a category with warnings enabled"

Question40: The command structure of the FortiGate CLI consists of commands, objects, branches, tables, and parameters.
Which of the following items describes user?

Question41: In an IPSec gateway-to-gateway configuration, two FortiGate units create a VPN tunnel between two separate private networks.
Which of the following configuration steps must be performed on both FortiGate units to support this configuration? (Select all that apply.)

Question42: What functions can the IPv6 Neighbor Discovery protocol accomplish? (Choose two.)

Question43: Which IPsec mode includes the peer id information in the first packet?

Question44: Which is one of the conditions that must be met for offloading the encryption and decryption of IPsec traffic to an NP6 processor?

Question45: Which of the following network protocols can be inspected by the Data Leak Prevention scanning?
(Choose three.)

Question46: Review the IPsec diagnostics output of the command diagnose vpn tunnel list shown in the exhibit.

Which of the following statements is correct regarding this output? (Select one answer).

Question47: In a FSSO agentless polling mode solution, where must the collector agent be?

Question48: You have configured the DHCP server on a FortiGate's port1 interface (or internal, depending on the model) to offer IPs in a range of 192.168.1.65-192.168.1.253.
When the first host sends a DHCP request, what IP will the DHCP offer?

Question49: An administrator configures a FortiGate unit in Transparent mode on the 192.168.11.0 subnet. Automatic Discovery is enabled to detect any available FortiAnalyzers on the network.
Which of the following FortiAnalyzers will be detected? (Select all that apply.)

Question50: How can DLP file filters be configured to detect Office 2010 files? (Select all that apply.)

Question51: You are the administrator in charge of a FortiGate acting as an IPsec VPN gateway using route- based mode. Users from either side must be able to initiate new sessions. There is only 1 subnet at either end and the FortiGate already has a default route.
Which two configuration steps are required to achieve these objectives? (Choose two.)

Question52: What are the requirements for a HA cluster to maintain TCP connections after device or link failover?
(Choose two.)

Question53: An administrator has configured a route-based site-to-site IPsec VPN. Which statement is correct regarding this IPsec VPN configuration?

Question54: Which of the following email spam filtering features is NOT supported on a FortiGate unit?

Question55: When firewall policy authentication is enabled, which protocols can trigger an authentication challenge?
(Choose two.)

Question56: What is required in a FortiGate configuration to have more than one dialup IPsec VPN using aggressive mode?

Question57: Which of the following statements are correct concerning layer 2 broadcast domains in transparent mode VDOMs?(Choose two)

Question58: Which of the following items does NOT support the Logging feature?

Question59: You wish to create a firewall policy that applies only to traffic intended for your web server. The web server has an IP address of 192.168.2.2 and a /24 subnet mask. When defining the firewall address for use in this policy, which one of the following addresses is correct?

Question60: Which of the following network protocols are supported for administrative access to a FortiGate unit?

Question61: Review the IPsec phase 1 configuration in the exhibit; then answer the question below.

Which statements are correct regarding this configuration? (Choose two.)

Question62: Users may require access to a web site that is blocked by a policy. Administrators can give users the ability to override the block.
Which of the following statements regarding overrides is NOT correct?

Question63: A FortiAnalyzer device could use which security method to secure the transfer of log data from FortiGate devices?

Question64: Which antivirus inspection mode must be used to scan SMTP, FTP, POP3 and SMB protocols?

Question65: Each UTM feature has configurable UTM objects such as sensors, profiles or lists that define how the feature will function.
An administrator must assign a set of UTM features to a group of users. Which of the following is the correct method for doing this?

Question66: Two-factor authentication is supported using the following methods? (Select all that apply.)

Question67: FSSO provides a single sign on solution to authenticate users transparently to a FortiGate unit using credentials stored in Windows active directory.
Which of the following statements are correct regarding FSSO in a Windows domain environment when agent mode is used? (Choose two.)

Question68: Which of the following are operating mode supported in FortiGate devices? (Choose two)

Question69: In which process states is it impossible to interrupt/kill a process? (Choose two.)

Question70: What capabilities can a FortiGate provide? (Choose three.)

Question71: Which of the following Fortinet products can receive updates from the FortiGuard Distribution Network?
(Select all that apply.)

Question72: Review the configuration for FortiClient IPsec shown in the exhibit.

Which statement is correct regarding this configuration?

Question73: Which statement is correct regarding virus scanning on a FortiGate unit?

Question74: A client can establish a secure connection to a corporate network using SSL VPN in tunnel mode. Which of the following statements are correct regarding the use of tunnel mode SSL VPN? (Select all that apply.)

Question75: Users may require access to a web site that is blocked by a policy. Administrators can give users the ability to override the block.
Which of the following statements regarding overrides are correct? (Select all that apply.)

Question76: How is the FortiGate password recovery process?

Question77: Which IP packets can be hardware-accelerated by a NP6 processor? (Choose two.)

Question78: A FortiGate device is configured with two VDOMs. The management VDOM is 'root' , and is configured in transparent mode,'vdom1' is configured as NAT/route mode. Which traffic is generated only by 'root' and not 'vdom1'? (Choose three.)

Question79: Which of the following are valid FortiGate device interface methods for handling DNS requests? (Select all that apply.)

Question80: Which statement describes what the CLI command diagnose debug authd fsso list is used for

Question81: Which are two requirements for DC-agent mode FSSO to work properly in a Windows AD environment?
(Choose two.)

Question82: When creating administrative users which of the following configuration objects determines access rights on the FortiGate unit.

Question83: Which of the following statements best describes the proxy behavior on a FortiGate unit during an FTP client upload when FTP splice is disabled?

Question84: Examine the following output from the diagnose sys session list command:

Which statements are true regarding the session above? (Choose two.)

Question85: Which of the following logging options are supported on a FortiGate unit? (Select all that apply.)

Question86: In a high availability cluster operating in active-active mode, which of the following correctly describes the path taken by the SYN packet of an HTTP session that is offloaded to a slave unit?

Question87: Review the IKE debug output for IPsec shown in the exhibit below.

Which statements is correct regarding this output?

Question88: What are valid options for handling DNS requests sent directly to a FortiGates interface IP? (Choose three.)

Question89: What information is synchronized between two FortiGate units that belong to the same HA cluster?
(Choose three)

Question90: An end user logs into the full-access SSL VPN portal and selects the Tunnel Mode option by clicking on the "Connect" button. The administrator has enabled split tunneling.

Given that the user authenticates against the SSL VPN policy shown in the image below, which statement below identifies the route that is added to the client's routing table.

Question91: The FortiGate unit can be configured to allow authentication to a RADIUS server. The RADIUS server can use several different authentication protocols during the authentication process.
Which of the following are valid authentication protocols that can be used when a user authenticates to the RADIUS server? (Select all that apply.)

Question92: Which of the following methods can be used to access the CLI? (Select all that apply.)

Question93: A FortiGate unit can provide which of the following capabilities? (Select all that apply.)

Question94: A FortiGate unit is configured to receive push updates from the FortiGuard Distribution Network, however, updates are not being received.
Which of the following statements are possible reasons for this? (Select all that apply.)

Question95: A firewall policy has been configured such that traffic logging is disabled and a UTM function is enabled.
In addition, the system setting `utm-incident-traffic-log' has been enabled. In which log will a UTM event message be stored?

Question96: Which type of conserve mode writes a log message immediately, rather than when the device exits conserve mode?

Question97: Two FortiGate units with NP6 processors form an active-active cluster. The cluster is doing security profile (UTM) inspection over all the user traffic. What statements are true regarding the sessions that the master unit is offloading to the slave unit for inspection? (Choose two.)

Question98: A firewall policy has been configured for the internal email server to receive email from external parties through SMTP. Exhibits A and B show the antivirus and email filter profiles applied to this policy.
Exhibit A:

Exhibit B:

What is the correct behavior when the email attachment is detected as a virus by the FortiGate antivirus engine?

Question99: For traffic that does match any configured firewall policy, what is the default action taken by the FortiGate?

Question100: The exhibit shows a part output of the diagnostic command 'diagnose debug application ike 255', taken during establishment of a VPN. Which of the following statement are correct concerning this output?
(Choose two)

Question101: A FortiGate AntiVirus profile can be configured to scan for viruses on SMTP, FTP, POP3, and SMB protocols using which inspection mode?

Question102: Examine the network topology diagram in the exhibit; the workstation with the IP address 212.10.11.110 sends a TCP SYN packet to the workstation with the IP address 212.10.11.20.

Which of the following sentences best describes the result of the reverse path forwarding (RFP) check executed by the FortiGate on the SYN packets? (Choose two).

Question103: Which of the following statements are true regarding the web filtering modes? (Choose two.)

Question104: What methods can be used to access the FortiGate CLI? (Choose two.)

Question105: Review the IPS sensor filter configuration shown in the exhibit

Based on the information in the exhibit, which statements are correct regarding the filter? (Choose two.)

Question106: Which part of an email message exchange is NOT inspected by the POP3 and IMAP proxies?

Question107: Examine the following log message for IPS and identify the valid responses below. (Select all that apply.)

Question108: When the SSL proxy is NOT doing man-in-the-middle interception of SSL traffic, which certificate field can be used to determine the rating of a website?

Question109: Which of the following components are contained in all FortiGate units from the FG50 models and up?
(Select all that apply.)

Question110: Which of the following statements correctly describes how a FortiGate unit functions in Transparent mode?

Question111: Which tasks fall under the responsibility of the SSL proxy in a typical HTTPS connection? (Choose two.)

Question112: Which authentication methods does FortiGate support for firewall authentication? (Choose two.)

Question113: Which protocol can an Internet browser use to download the PAC file with the web proxy configuration?

Question114: In order to match an identity-based policy, the FortiGate unit checks the IP information. Once inside the policy, the following logic is followed:

Question115: Which of the following statements are characteristics of a FSSO solution using advanced access mode?
(Choose three.)

Question116: Which of the following is true regarding Switch Port Mode?

Question117: Which firewall objects can be included in the Destination Address field of a firewall policy? (Choose three.)

Question118: A FortiGate unit can act as which of the following? (Select all that apply.)

Question119: The FortiGate unit's GUI provides a link to update the firmware. Clicking this link will perform which of the following actions?

Question120: Which statement concerning IPS is false?

Question121: If a FortiGate unit has a dmz interface IP address of 210.192.168.2 with a subnet mask of 255.255.255.0, what is a valid dmz DHCP addressing range?

Question122: Which of the following is an advantage of using SNMP v3 instead of SNMP v1/v2 when querying the FortiGate unit?

Question123: In NAT/Route mode when there is no matching firewall policy for traffic to be forwarded by the Firewall, which of the following statements describes the action taken on traffic?

Question124: Examine the firewall configuration shown below; then answer the question following it.

Which of the following statements are correct based on the firewall configuration illustrated in the exhibit?
(Select all that apply.)

Question125: What configuration objects are automatically added when using the FortiGate's FortiClient VPN Configurations Wizard?(Choose two)

Question126: Which of the following statements are correct regarding logging to memory on a FortiGate unit? (Select all that apply.)

Question127: What is the maximum number of FortiAnalyzer/FortiManager devices a FortiGate unit can be configured to send logs to?

Question128: A client can create a secure connection to a FortiGate device using SSL VPN in web-only mode. Which one of the following statements is correct regarding the use of web-only mode SSL VPN?

Question129: For data leak prevention, which statement describes the difference between the block and quarantine actions?

Question130: Which one of the following statements is correct about raw log messages?

Question131: Which statements are true regarding IPv6 anycast addresses? (Choose two.)

Question132: Which statements are true about offloading antivirus inspection to a Security Processor (SP)? (Choose two.)

Question133: Examine the exhibit; then answer the question below.

Which statement describes the green status indicators that appear next to the different FortiGuard Distribution Network services as illustrated in the exhibit?

Question134: An administrator has formed a high availability cluster involving two FortiGate units.
[Multiple upstream Layer 2 switches] -- [ FortiGate HA Cluster ] -- [ Multiple downstream Layer 2 switches ] The administrator wishes to ensure that a single link failure will have minimal impact upon the overall throughput of traffic through this cluster.
Which of the following options describes the best step the administrator can take? The administrator should_____________.

Question135: Which of the following are valid components of the Fortinet Server Authentication Extensions (FSAE)?
(Select all that apply.)

Question136: Which of the following statements is correct regarding a FortiGate unit operating in NAT/Route mode?

Question137: In HA, the option Reserve Management Port for Cluster Member is selected as shown in the exhibit below.

Which statements are correct regarding this setting? (Choose two.)

Question138: Which of the following spam filtering methods are supported on the FortiGate unit? (Select all that apply.)

Question139: Regarding the header and body sections in raw log messages, which statement is correct?

Question140: When backing up the configuration file on a FortiGate unit, the contents can be encrypted by enabling the encrypt option and supplying a password.
If the password is forgotten, the configuration file can still be restored using which of the following methods?

Question141: When creating FortiGate administrative users, which configuration objects specify the account rights?

Question142: Review the static route configuration for IPsec shown in the exhibit; then answer the question below.

Which statements are correct regarding this configuration? (Choose two.)

Question143: What methods can be used to deliver the token code to a user that is configured to use two-factor authentication? (Choose three.)

Question144: Which of the following antivirus and attack definition update options are supported by FortiGate units?
(Select all that apply.)

Question145: Under the System Information widget on the dashboard, which of the following actions are available for the system configuration? (Select all that apply.)

Question146: Which of the following methods can be used to access the CLI? (Select all that apply.)

Question147: Which IPsec configuration mode can be used for implementing GRE-over-IPsec VPNs?.

Question148: Which is NOT true about the settings for an IP pool type port block allocation?

Question149: Which of the following authentication types are supported by FortiGate units? (Select all that apply.)

Question150: Which statement best describes what SSL.root is?

Question151: The ordering of firewall policies is very important. Policies can be re-ordered within the FortiGate unit's GUI and also using the CLI. The command used in the CLI to perform this function is _________.

Question152: Which statements are true regarding the factory default configuration? (Choose three.)

Question153: Examine the exhibit shown below; then answer the question following it.

Which of the following statements best describes the green status indicators that appear next to the different FortiGuard Distribution Network services as illustrated in the exhibit?

Question154: Which two statements are true regarding firewall policy disclaimers? (Choose two.)

Question155: An administrator has configured a FortiGate unit so that end users must authenticate against the firewall using digital certificates before browsing the Internet.
What must the user have for a successful authentication? (Select all that apply.)

Question156: Bob wants to send Alice a file that is encrypted using public key cryptography.
Which of the following statements is correct regarding the use of public key cryptography in this scenario?

Question157: Which header field can be used in a firewall policy for traffic matching?

Question158: Which of the following statements are correct concerning the IPsec phase 1 and phase 2, shown in the exhibit? (choose two)

Question159: Which of the following statements are correct about the HA command diagnose sys ha reset- uptime?
(Choose two.)

Question160: The Idle Timeout setting on a FortiGate unit applies to which of the following?

Question161: Which statements are correct for port pairing and forwarding domains? (Choose two.)

Question162: Which is the following statement are true regarding application control? (choose two)

Question163: Examine at the output below from the diagnose sys top command:

Which statements are true regarding the output above? (Choose two.)

Question164: The command structure of the CLI on a FortiGate unit consists of commands, objects, branches, tables and parameters. Which of the following items describes port1?

Question165: If you enable the option "Generate Logs when Session Starts", what effect does this have on the number of traffic log messages generated for each session?

Question166: Which action is taken by the FortiGate device when a file matches more than one rule in a Data Leak Prevention sensor?

Question167: The default administrator profile that is assigned to the default "admin" user on a FortGate device is:
_______________.

Question168: The exhibit shows the Disconnect Cluster Member command in a FortiGate unit that is part of a HA cluster with two HA members.

What is the effect of the Disconnect Cluster Member command as given in the exhibit. (Choose two.)

Question169: A FortiGate is configured to receive push updates from the FortiGuard Distribution Network, however, updates are not being received.
Which are two reasons for this problem? (Choose two.)

Question170: Which statements are correct properties of a partial mesh VPN deployment. (Choose two.)

Question171: Which statement is one disadvantage of using FSSO NetAPI polling mode over FSSO Security Event Log (WinSecLog) polling mode?

Question172: What is IPsec Perfect Forwarding Secrecy (PFS)?

Question173: Which statement is an advantage of using a hub and spoke IPsec VPN configuration instead of a fully- meshed set of IPsec tunnels?

Question174: Which antivirus and attack definition update options are supported by FortiGate units? (Choose two.)

Question175: Examine the following CLI configuration:
config system session-ttl
set default 1800
end
What statement is true about the effect of the above configuration line?

Question176: Which network protocols are supported for administrative access to a FortiGate unit? (Choose three.)