EMT Practice Test

1. Question Content...

---

Question1: Which correctly define "Section View" and "Global View" for firewall policies? (Choose two.)

Question2: Encrypted backup files provide which of the following benefits? (Select all that apply.)

Question3: The diag sys session list command is executed in the CLI. The output of this command is shown in the exhibit.

Based on the output from this command, which of the following statements is correct?

Question4: In which process states is it impossible to interrupt/kill a process? (Choose two.)

Question5: For data leak prevention, which statement describes the difference between the block and quarantine actions?

Question6: Which operating system vulnerability can you protect when selecting signatures to include in an IPS sensor? (Choose three)

Question7: An issue could potentially occur when clicking Connect to start tunnel mode SSL VPN. The tunnel will start up for a few seconds, then shut down.
Which of the following statements best describes how to resolve this issue?

Question8: Which of the following pieces of information can be included in the Destination Address field of a firewall policy? (Select all that apply.)

Question9: A new version of FortiOS firmware has just been released. When you upload new firmware, which is true?

Question10: A network administrator connects his PC to the INTERNAL interface on a FortiGate unit.
The administrator attempts to make an HTTPS connection to the FortiGate unit on the VLAN1 interface at the IP address of 10.0.1.1, but gets no connectivity.
The following troubleshooting commands are executed from the CLI:

Based on the output from these commands, which of the following is a possible cause of the problem?

Question11: When the SSL proxy is NOT doing man-in-the-middle interception of SSL traffic, which certificate field can be used to determine the rating of a website?

Question12: A FortiGate unit can create a secure connection to a client using SSL VPN in tunnel mode. Which of the following statements are correct regarding the use of tunnel mode SSL VPN? (Select all that apply.)

Question13: When firewall policy authentication is enabled, only traffic on supported protocols will trigger an authentication challenge.
Select all supported protocols from the following:

Question14: Both the FortiGate and FortiAnalyzer units can notify administrators when certain alert conditions are met.
Considering this, which of the following statements is NOT correct?

Question15: Which of the following logging options are supported on a FortiGate unit? (Select all that apply.)

Question16: Caching improves performance by reducing FortiGate unit requests to the FortiGuard server. Which of the following statements are correct regarding the caching of FortiGuard responses? (Select all that apply.)

Question17: An administrator logs into a FortiGate unit using an account which has been assigned a super_admin profile. Which of the following operations can this administrator perform?

Question18: Which of the following describes the best custom signature for detecting the use of the word "Fortinet" in chat applications?

Question19: In an IPSec gateway-to-gateway configuration, two FortiGate units create a VPN tunnel between two separate private networks.
Which of the following configuration steps must be performed on both FortiGate units to support this configuration? (Select all that apply.)

Question20: A FortiGate is configured to receive push updates from the FortiGuard Distribution Network, however, updates are not being received.
Which are two reasons for this problem? (Choose two.)

Question21: Which of the following must be configured on a FortiGate unit to redirect content requests to remote web cache servers?

Question22: You are the administrator in charge of a FortiGate acting as an IPsec VPN gateway using route- based mode. Users from either side must be able to initiate new sessions. There is only 1 subnet at either end and the FortiGate already has a default route.
Which two configuration steps are required to achieve these objectives? (Choose two.)

Question23: What are the advantages of FSSO DC mode over polling mode?

Question24: Which of the following items are considered to be advantages of using the application control features on the FortiGate unit?
Application control allows an administrator to:

Question25: An administrator wishes to generate a report showing Top Traffic by service type. They notice that web traffic overwhelms the pie chart and want to exclude the web traffic from the report. Which of the following statements best describes how to do this?

Question26: Which of the following statements is correct about configuring web filtering overrides?

Question27: Which IP packets can be hardware-accelerated by a NP6 processor? (Choose two.)

Question28: Which of the following statements correctly describes the deepscan option for HTTPS?

Question29: FSSO provides a single sign on solution to authenticate users transparently to a FortiGate unit using credentials stored in Windows active directory.
Which of the following statements are correct regarding FSSO in a Windows domain environment when agent mode is used? (Choose two.)

Question30: A FortiGate unit is configured to receive push updates from the FortiGuard Distribution Network, however, updates are not being received.
Which of the following statements are possible reasons for this? (Select all that apply.)

Question31: Which of the following statements are true about PKI users created in a FortiGate device? (Choose two.)

Question32: Examine the following output from the diagnose sys session list command:

Which statements are true regarding the session above? (Choose two.)

Question33: What functions can the IPv6 Neighbor Discovery protocol accomplish? (Choose two.)

Question34: In NAT/Route mode when there is no matching firewall policy for traffic to be forwarded by the Firewall, which of the following statements describes the action taken on traffic?

Question35: Which of the following statements are correct regarding logging to memory on a FortiGate unit? (Select all that apply.)

Question36: A FortiGate device is configure to perform an AV & IPS scheduled update every hour.

Given the information in the exhibit, when will the next update happen?

Question37: In a High Availability configuration operating in Active-Active mode, which of the following correctly describes the path taken by a load-balanced HTTP session?

Question38: Which of the following statements are correct regarding URL Filtering on the FortiGate unit? (Select all that apply.)

Question39: A client can establish a secure connection to a corporate network using SSL VPN in tunnel mode. Which of the following statements are correct regarding the use of tunnel mode SSL VPN? (Select all that apply.)

Question40: Review to the network topology in the exhibit. The workstation, 172.16.1.1/24, connects to port2 of the FortiGate device, and the ISP router, 172.16.1.2, connects to port1. Without changing IP addressing, which configuration changes are required to properly forward users traffic to the Internet? (Choose two)

Question41: Which of the following FSSO agents are required for a DC agent mode solution? (Choose two.)

Question42: When configuring a server load balanced virtual IP, which of the following is the best distribution algorithm to be used in applications where the same physical destination server must be maintained between sessions?

Question43: The order of the firewall policies is important. Policies can be re-ordered from either the GUI or the CLI.
Which CLI command is used to perform this function?

Question44: Which statement describes what the CLI command diagnose debug authd fsso list is used for

Question45: The FortiGate unit's GUI provides a link to update the firmware. Clicking this link will perform which of the following actions?

Question46: When creating administrative users which of the following configuration objects determines access rights on the FortiGate unit.

Question47: Which of the following methods can be used to access the CLI? (Select all that apply.)

Question48: The Host Check feature can be enabled on the FortiGate unit for SSL VPN connections. When this feature is enabled, the FortiGate unit probes the remote host computer to verify that it is "safe" before access is granted.
Which of the following items is NOT an option as part of the Host Check feature?

Question49: Two FortiGate units with NP6 processors form an active-active cluster. The cluster is doing security profile (UTM) inspection over all the user traffic. What statements are true regarding the sessions that the master unit is offloading to the slave unit for inspection? (Choose two.)

Question50: Examine the following spanning tree configuration on a FortiGate in transparent mode:

Which statement is correct for the above configuration?

Question51: Which statement is correct regarding virus scanning on a FortiGate unit?

Question52: Which of the following items does NOT support the Logging feature?

Question53: Which of the following authentication types are supported by FortiGate units? (Select all that apply.)

Question54: Which of the following statements are true regarding Local User Authentication? (Select all that apply.)

Question55: Which of the following features could be used by an administrator to block FTP uploads while still allowing FTP downloads?

Question56: A network administrator connects his PC to the INTERNAL interface on a FortiGate unit.
The administrator attempts to make an HTTPS connection to the FortiGate unit on the VLAN1 interface at the IP address of 10.0.1.1, but gets no connectivity.
The following troubleshooting commands are executed from the DOS prompt on the PC and from the CLI.

Based on the output from these commands, which of the following explanations is a possible cause of the problem?

Question57: Which of the following methods does the FortiGate unit use to determine the availability of a web cache using Web Cache Communication Protocol (WCCP)?

Question58: An administrator is configuring a DLP rule for FTP traffic. When adding the rule to a DLP sensor,

the administrator notes that the Ban Sender action is not available (greyed-out), as shown in the exhibit.
Which of the following is the best explanation for the Ban Sender action NOT being available?

Question59: An end user logs into the full-access SSL VPN portal and selects the Tunnel Mode option by clicking on the "Connect" button. The administrator has enabled split tunneling.

Given that the user authenticates against the SSL VPN policy shown in the image below, which statement below identifies the route that is added to the client's routing table.

Question60: Identify the statement which correctly describes the output of the following command:
diagnose ips anomaly list

Question61: Which of the following fields contained in the IP/TCP/UDP headers can be used to make a routing decision when using policy-based routing? (Choose three)

Question62: Which of the following statements is correct based on the firewall configuration illustrated in the exhibit?

Question63: Based on the web filtering configuration illustrated in the exhibit,

which one of the following statements is not a reasonable conclusion?

Question64: The exhibit shows the Disconnect Cluster Member command in a FortiGate unit that is part of a HA cluster with two HA members.

What is the effect of the Disconnect Cluster Member command as given in the exhibit. (Choose two.)

Question65: Which email filter is NOT available on a FortiGate device?

Question66: In which order are firewall policies processed on the FortiGate unit?

Question67: Which is true of FortiGate's session table?

Question68: Your Linux email server runs on a non-standard port number, port 2525. Which statement is true?

Question69: Which of the following statements are correct regarding virtual domains (VDOMs)? (Select all that apply.)

Question70: What advantages are there in using a fully Meshed IPSec VPN configuration instead of a hub and spoke set of IPSec tunnels?

Question71: Which profile could IPS engine use on an interface that is in sniffer mode? (Choose three)

Question72: Two-factor authentication is supported using the following methods? (Select all that apply.)

Question73: How is the FortiGate password recovery process?

Question74: SSL Proxy is used to decrypt the SSL-encrypted traffic. After decryption, where is the traffic buffered in preparation for content inspection?

Question75: Which of the following options can you use to update the virus definitions on a FortiGate unit? (Select all that apply.)

Question76: A firewall policy has been configured for the internal email server to receive email from external parties through SMTP. Exhibits A and B show the antivirus and email filter profiles applied to this policy.
Exhibit A:

Exhibit B:

What is the correct behavior when the email attachment is detected as a virus by the FortiGate antivirus engine?

Question77: Regarding the header and body sections in raw log messages, which statement is correct?

Question78: What advantages are there in using a hub-and-spoke IPSec VPN configuration instead of a fully- meshed set of IPSec tunnels? (Select all that apply.)

Question79: Which of the following are valid authentication user group types on a FortiGate unit? (Select all that apply.)

Question80: Which of the following network protocols are supported for administrative access to a FortiGate unit?

Question81: What advantages are there in using a hub-and-spoke IPSec VPN configuration instead of a fully- meshed set of IPSec tunnels? (Select all that apply.)

Question82: Which is NOT true about source matching with firewall policies?

Question83: Which of the following are valid components of the Fortinet Server Authentication Extensions (FSAE)?
(Select all that apply.)

Question84: Two devices are in an HA cluster, the device hostnames are STUDENT and REMOTE. Exhibit A shows the command output of diagnose sys session stat for the STUDENT device. Exhibit B shows the command output of diagnose sys session stat for the REMOTE device.
Exhibit A:

Exhibit B:

Given the information provided in the exhibits, which of the following statements are correct? (Choose two.)

Question85: Which header field can be used in a firewall policy for traffic matching?

Question86: A FortiAnalyzer device could use which security method to secure the transfer of log data from FortiGate devices?

Question87: Which of the following settings can be configured per VDOM? (Choose three.)

Question88: Which statement is one disadvantage of using FSSO NetAPI polling mode over FSSO Security Event Log (WinSecLog) polling mode?

Question89: Which of the following statements are correct concerning the FortiGate session life support protocol?
(Choose two)

Question90: Which of the following DLP actions will override any other action?

Question91: A network administrator needs to implement dynamic route redundancy between a FortiGate unit located in a remote office and a FortiGate unit located in the central office.
The remote office accesses central resources using IPSec VPN tunnels through two different Internet providers.
What is the best method for allowing the remote office access to the resources through the FortiGate unit used at the central office?

Question92: How can DLP file filters be configured to detect Office 2010 files? (Select all that apply.)

Question93: The exhibit shows two static routes to the same destinations subnet 172.20.168.0/24.

Which of the following statements correctly describes this static routing configuration? (choose two)

Question94: To which remote device can the FortiGate send logs? (Choose three.)

Question95: With FSSO, a domain user could authenticate either against the domain controller running the Collector Agent and Domain Controller Agent, or a domain controller running only the Domain Controller Agent.
If you attempt to authenticate with the Secondary Domain Controller running only the Domain Controller Agent, which of the following statements are correct? (Select all that apply.)

Question96: Which is one of the conditions that must be met for offloading the encryption and decryption of IPsec traffic to an NP6 processor?

Question97: When the SSL proxy inspects the server certificate for Web Filtering only in SSL Handshake mode, which certificate field is being used to determine the site rating?

Question98: Review the IKE debug output for IPsec shown in the exhibit below.

Which statements is correct regarding this output?

Question99: Which statement best describes what the FortiGate hardware acceleration processors main task is?

Question100: The following ban list entry is displayed through the CLI.

Based on this command output, which of the following statements is correct?

Question101: Which is an advantage of using SNMP v3 instead of SNMP v1/v2 when querying a FortiGate unit?

Question102: Review the IPsec phase 1 configuration in the exhibit; then answer the question below.

Which statements are correct regarding this configuration? (Choose two.)

Question103: Which statement is correct concerning creating a custom signature?

Question104: An administrator has configured a FortiGate unit so that end users must authenticate against the firewall using digital certificates before browsing the Internet.
What must the user have for a successful authentication? (Select all that apply.)

Question105: The following diagnostic output is displayed in the CLI:

Based on this output, which of the following statements is correct?

Question106: What are examples of correct syntax for the session table diagnostics command? (Choose two.)

Question107: What are the requirements for a cluster to maintain TCP connections after device or link failover? (Select all that apply.)

Question108: Which of the following statements describe some of the differences between symmetric and asymmetric cryptography? (Choose two.)

Question109: Which of the following statements regarding the firewall policy authentication timeout is true?

Question110: A FortiGate unit is configured with multiple VDOMs. An administrative account on the device has been assigned a Scope value of VDOM:root.
Which of the following items would an administrator logging in using this account NOT be able to configure?

Question111: In the Tunnel Mode widget of the web portal, the administrator has configured an IP Pool and enabled split tunneling.
Which of the following statements is true about the IP address used by the SSL VPN client?

Question112: In a high availability cluster operating in active-active mode, which of the following correctly describes the path taken by the SYN packet of an HTTP session that is offloaded to a slave unit?

Question113: Which of the following options best defines what Diffie-Hellman is?

Question114: Which of the following antivirus and attack definition update options are supported by FortiGate units?
(Select all that apply.)

Question115: Which of the following items is NOT a packet characteristic matched by a firewall service object?

Question116: If Routing Information Protocol (RIP) version 1 or version 2 has already been configured on a FortiGate unit, which of the following statements is correct if the routes learned through RIP need to be advertised into Open Shortest Path First (OSPF)?

Question117: Review the CLI configuration below for an IPS sensor and identify the correct statements regarding this configuration from the choices below. (Select all that apply.)

Question118: Which tasks fall under the responsibility of the SSL proxy in a typical HTTPS connection? (Choose two.)

Question119: Examine the firewall configuration shown below; then answer the question following it.

Which of the following statements are correct based on the firewall configuration illustrated in the exhibit?
(Select all that apply.)

Question120: Files reported as "suspicious" were subject to which Antivirus check"?

Question121: The FortiGate unit can be configured to allow authentication to a RADIUS server. The RADIUS server can use several different authentication protocols during the authentication process.
Which of the following are valid authentication protocols that can be used when a user authenticates to the RADIUS server? (Select all that apply.)

Question122: Which best describe the mechanism of a TCP SYN flood?

Question123: Which of the following is an advantage of using SNMP v3 instead of SNMP v1/v2 when querying the FortiGate unit?

Question124: Examine the exhibit shown below; then answer the question following it.

Which of the following statements best describes the green status indicators that appear next to the different FortiGuard Distribution Network services as illustrated in the exhibit?

Question125: Which is the following statement are true regarding application control? (choose two)

Question126: The ordering of firewall policies is very important. Policies can be re-ordered within the FortiGate unit's GUI and also using the CLI. The command used in the CLI to perform this function is _________.

Question127: Which of the following statements best describes the role of a DC agents in an FSSO DC?

Question128: Which of the following spam filtering methods are supported on the FortiGate unit? (Select all that apply.)

Question129: What is IPsec Perfect Forwarding Secrecy (PFS)?

Question130: Which of the following statements are true about Man-in-the-middle SSL Content Inspection? (Choose three.)

Question131: Which of the following statements is correct about how the FortiGate unit verifies username and password during user authentication?

Question132: Which of the following statements are true regarding DLP File Type Filtering? (Choose two.)

Question133: Which of the following Fortinet products can receive updates from the FortiGuard Distribution Network?
(Select all that apply.)

Question134: Which are two requirements for DC-agent mode FSSO to work properly in a Windows AD environment?
(Choose two.)

Question135: What capabilities can a FortiGate provide? (Choose three.)

Question136: An administrator wishes to generate a report showing Top Traffic by service type, but wants to exclude SMTP traffic from the report.
Which of the following statements best describes how to do this?

Question137: A FortiClient fails to establish a VPN tunnel with a FortiGate unit.
The following information is displayed in the FortiGate unit logs:

Which of the following statements is a possible cause for the failure to establish the VPN tunnel?

Question138: The transfer of encrypted files or the use of encrypted protocols between users and servers on the internet can frustrate the efforts of administrators attempting to monitor traffic passing through the FortiGate unit and ensuring user compliance to corporate rules.
Which of the following items will allow the administrator to control the transfer of encrypted data through the FortiGate unit? (Select all that apply.)

Question139: Which statements are correct regarding an IPv6 over IPv4 IPsec configuration? (Choose two.)

Question140: In Transparent Mode, forward-domain is an attribute of _______.

Question141: Which statements are correct properties of a partial mesh VPN deployment. (Choose two.)

Question142: Which statement best describes the objective of the SYN proxy feature available in SP processors?

Question143: Examine the exhibit; then answer the question below.

Which statement describes the green status indicators that appear next to the different FortiGuard Distribution Network services as illustrated in the exhibit?

Question144: Which are outputs for the command `diagnose hardware deviceinfo nic'? (Choose two.)

Question145: Which of the following is true regarding Switch Port Mode?

Question146: Examine the following CLI configuration:
config system session-ttl
set default 1800
end
What statement is true about the effect of the above configuration line?

Question147: What methods can be used to deliver the token code to a user that is configured to use two-factor authentication? (Choose three.)

Question148: You wish to create a firewall policy that applies only to traffic intended for your web server. The web server has an IP address of 192.168.2.2 and a /24 subnet mask. When defining the firewall address for use in this policy, which one of the following addresses is correct?

Question149: Review the IPS sensor filter configuration shown in the exhibit

Based on the information in the exhibit, which statements are correct regarding the filter? (Choose two.)

Question150: Which network protocols are supported for administrative access to a FortiGate unit? (Choose three.)

Question151: Which two statements are true regarding firewall policy disclaimers? (Choose two.)

Question152: Users may require access to a web site that is blocked by a policy. Administrators can give users the ability to override the block.
Which of the following statements regarding overrides are correct? (Select all that apply.)

Question153: Which of the following are valid FortiGate device interface methods for handling DNS requests? (Select all that apply.)

Question154: An administrator is examining the attack logs and notices the following entry:

Based solely upon this log message, which of the following statements is correct?

Question155: An intermittent connectivity issue is noticed between two devices located behind the FortiGate dmz and internal interfaces. A continuous sniffer trace is run on the FortiGate unit that the administrator will convert into a .cap file for an off-line analysis with a sniffer application.

Given the high volume of global traffic on the network, which of the following CLI commands will best allow the administrator to perform this troubleshooting operation?

Question156: In which of the following report templates would you configure the charts to be included in the report?

Question157: Which one of the following statements is correct about raw log messages?

Question158: Which of the following statements is correct regarding a FortiGate unit operating in NAT/Route mode?

Question159: A FortiGate is configured with the 1.1.1.1/24 address on the wan2 interface and HTTPS Administrative Access, using the default tcp port, is enabled for that interface. Given the SSL VPN settings in the exhibit.

Which of the following SSL VPN login portal URLs are valid? (Choose two.)

Question160: There are eight (8) log severity levels that indicate the importance of an event. Not including Debug, which is only needed to log diagnostic data, what are both the lowest AND highest severity levels?

Question161: What logging options are supported on a FortiGate unit? (Choose two.)

Question162: Review the configuration for FortiClient IPsec shown in the exhibit.

Which statement is correct regarding this configuration?

Question163: The eicar test virus is put into a zip archive, which is given the password of "Fortinet" in order to open the archive. Review the configuration in the exhibits shown below; then answer the question that follows.
Exhibit A - Antivirus Profile:

Exhibit B - Non-default UTM Proxy Options Profile:

Exhibit C - DLP Profile:

Which of one the following profiles could be enabled in order to prevent the file from passing through the FortiGate device over HTTP on the standard port for that protocol?

Question164: Under the System Information widget on the dashboard, which of the following actions are available for the system configuration? (Select all that apply.)

Question165: A FortiGate administrator configures a Virtual Domain (VDOM) for a new customer. After creating the VDOM, the administrator is unable to reassign the dmz interface to the new VDOM as the option is greyed out in Web Config in the management VDOM.
What would be a possible cause for this problem?

Question166: An Internet browser is using the WPAD DNS method to discover the PAC file's URL. The DNS server replies to the browser's request with the IP address 10.100.1.10. Which URL will the browser use to download the PAC file?

Question167: Which of the following statements are true of the FortiGate unit's factory default configuration?

Question168: Which of the following statements are correct regarding the configuration of a FortiGate unit as an SSL VPN gateway? (Select all that apply.)

Question169: Review the exhibit of an explicit proxy policy configuration. If there is a proxy connection attempt coming from the IP address 10.0.1.5, and from a user that has not authenticated yet, what action does the FortiGate proxy take?

Question170: Which antivirus and attack definition update options are supported by FortiGate units? (Choose two.)

Question171: Which of the following Session TTL values will take precedence?

Question172: Which Fortinet products & features could be considered part of a comprehensive solution to monitor and prevent the leakage of sensitive data? (Select all that apply.)

Question173: An organization wishes to protect its SIP Server from call flooding attacks. Which of the following configuration changes can be performed on the FortiGate unit to fulfill this requirement?

Question174: Which protocols can you use for secure administrative access to a FortiGate? (Choose two)

Question175: Acme Web Hosting is replacing one of their firewalls with a FortiGate. It must be able to apply port forwarding to their back-end web servers while blocking virus uploads and TCP SYN floods from attackers.
Which operation mode is the best choice for these requirements?

Question176: If Open Shortest Path First (OSPF) has already been configured on a FortiGate unit, which of the following statements is correct if the routes learned through OSPF need to be announced by Border Gateway Protocol (BGP)?

Question177: An administrator configures a VPN and selects the Enable IPSec Interface Mode option in the phase 1 settings.
Which of the following statements are correct regarding the IPSec VPN configuration?

Question178: WAN optimization is configured in Active/Passive mode. When will the remote peer accept an attempt to initiate a tunnel?

Question179: Which statements are true regarding the factory default configuration? (Choose three.)

Question180: Examine the following log message for IPS and identify the valid responses below. (Select all that apply.)

Question181: An administrator has configured a route-based site-to-site IPsec VPN. Which statement is correct regarding this IPsec VPN configuration?

Question182: An administrator has formed a high availability cluster involving two FortiGate units.
[Multiple upstream Layer 2 switches] -- [ FortiGate HA Cluster ] -- [ Multiple downstream Layer 2 switches ] The administrator wishes to ensure that a single link failure will have minimal impact upon the overall throughput of traffic through this cluster.
Which of the following options describes the best step the administrator can take? The administrator should_____________.

Question183: In the debug command output shown in the exhibit, which of the following best described the MAC address
00:09:0f:69:03:7e?

Question184: The FortiGate port1 is connected to the Internet. The FortiGate port2 is connected to the internal network.
Examine the firewall configuration shown in the exhibit; then answer the question below.

Based on the firewall configuration illustrated in the exhibit, which statement is correct?

Question185: When performing a log search on a FortiAnalyzer, it is generally recommended to use the Quick Search option.
What is a valid reason for using the Full Search option, instead?

Question186: Which statements are true regarding local user authentication? (Choose two.)

Question187: Which of the following IPsec configuration modes can be used for implementing L2TP- over- IPSec VPNs?

Question188: What is the maximum number of FortiAnalyzer/FortiManager devices a FortiGate unit can be configured to send logs to?

Question189: For traffic that does match any configured firewall policy, what is the default action taken by the FortiGate?

Question190: An administrator sets up a new FTP server on TCP port 2121. A FortiGate unit is located between the FTP clients and the server. The administrator has created a policy for TCP port 2121.
Users have been complaining that when downloading data they receive a 200 Port command successful message followed by a 425 Cannot build data connection message.
Which of the following statements represents the best solution to this problem?

Question191: Review the IPsec diagnostics output of the command diagnose vpn tunnel list shown in the exhibit below.

Which statements are correct regarding this output? (Choose two.)

Question192: FILL BLANK
The___________ CLI command is used on the FortiGate unit to run static commands such as ping or to reset the FortiGate unit to factory defaults.

Question193: Which of the following statements is correct regarding the FortiGuard Services Web Filtering Override configuration as illustrated in the exhibit?

Question194: In HA, the option Reserve Management Port for Cluster Member is selected as shown in the exhibit below.

Which statements are correct regarding this setting? (Choose two.)

Question195: What are valid options for handling DNS requests sent directly to a FortiGates interface IP? (Choose three.)

Question196: A firewall policy has been configured such that traffic logging is disabled and a UTM function is enabled.
In addition, the system setting `utm-incident-traffic-log' has been enabled. In which log will a UTM event message be stored?

Question197: When backing up the configuration file on a FortiGate unit, the contents can be encrypted by enabling the encrypt option and supplying a password.
If the password is forgotten, the configuration file can still be restored using which of the following methods?

Question198: Which IPsec mode includes the peer id information in the first packet?

Question199: When creating FortiGate administrative users, which configuration objects specify the account rights?

Question200: What are the valid sub-types for a Firewall type policy? (Select all that apply)

Question201: Which of the following report templates must be used when scheduling report generation?

Question202: Which of the following statements is not correct regarding virtual domains (VDOMs)?

Question203: How is traffic routed onto an SSL VPN tunnel from the FortiGate unit side?

Question204: Which of the following email spam filtering features is NOT supported on a FortiGate unit?

Question205: Which of the following statements are TRUE for Port Pairing and Forwarding Domains? (Select all that apply.)

Question206: In order to load-share traffic using multiple static routes, the routes must be configured with ...

Question207: When browsing to an internal web server using a web-mode SSL VPN bookmark, from which of the following source IP addresses would the web server consider the HTTP request to be initiated?

Question208: Which statement regarding the firewall policy authentication timeout is true?

Question209: What are required to be the same for two FortiGate units to form an HA cluster? (Choose two)

Question210: In which order are firewall policies processed on a FortiGate unit?

Question211: An administrator configures a FortiGate unit in Transparent mode on the 192.168.11.0 subnet. Automatic Discovery is enabled to detect any available FortiAnalyzers on the network.
Which of the following FortiAnalyzers will be detected? (Select all that apply.)

Question212: A DLP rule with an action of Exempt has been matched against traffic passing through the FortiGate unit.
Which of the following statements is correct regarding how this transaction will be handled by the FortiGate unit?

Question213: A FortiGate unit can provide which of the following capabilities? (Select all that apply.)

Question214: An administrator wants to create an IPsec VPN tunnel between two FortiGate devices. Which three configuration steps must be performed on both units to support this scenario? (Choose three.)

Question215: When viewing the Banned User monitor in Web Config, the administrator notes the entry illustrated in the exhibit.

Which of the following statements is correct regarding this entry?

Question216: What is longest length of time allowed on a FortiGate device for the virus scan to complete?

Question217: Which of the following cannot be used in conjunction with the endpoint compliance check?

Question218: Which antivirus inspection mode must be used to scan SMTP, FTP, POP3 and SMB protocols?

Question219: Which statements are true regarding IPv6 anycast addresses? (Choose two.)

Question220: A portion of the device listing for a FortiAnalyzer unit is displayed in the exhibit.

Which of the following statements best describes the reason why the FortiGate 60B unit is unable to archive data to the FortiAnalyzer unit?

Question221: Which of the following statements is correct regarding the NAC Quarantine feature?

Question222: What methods can be used to access the FortiGate CLI? (Choose two.)

Question223: Which firewall objects can be included in the Destination Address field of a firewall policy? (Choose three.)

Question224: Two FortiGate devices fail to form an HA cluster, the device hostnames are STUDENT and REMOTE.
Exhibit A shows the command output of show system ha for the STUDENT device. Exhibit B shows the command output of show system ha for the REMOTE device.
Exhibit A:

Exhibit B

Which one of the following is the most likely reason that the cluster fails to form?

Question225: Which of the following statements are true about the SSL Proxy certificate that must be used for SSL Content Inspection? (Choose two.)

Question226: Users may require access to a web site that is blocked by a policy. Administrators can give users the ability to override the block.
Which of the following statements regarding overrides is NOT correct?

Question227: A client can create a secure connection to a FortiGate device using SSL VPN in web-only mode. Which one of the following statements is correct regarding the use of web-only mode SSL VPN?

Question228: A FortiGate AntiVirus profile can be configured to scan for viruses on SMTP, FTP, POP3, and SMB protocols using which inspection mode?

Question229: Which statements are true about offloading antivirus inspection to a Security Processor (SP)? (Choose two.)

Question230: Examine the Exhibits shown below, then answer the question that follows. Review the following DLP Sensor (Exhibit 1):

Review the following File Filter list for rule #1 (Exhibit 2):

Review the following File Filter list for rule #2 (Exhibit 3):

Review the following File Filter list for rule #3 (Exhibit 4):

An MP3 file is renamed to `workbook.exe' and put into a ZIP archive. It is then sent through the FortiGate device over HTTP. It is intercepted and processed by the configuration shown in the above Exhibits 1-4.
Assuming the file is not too large for the File scanning threshold, what action will the FortiGate unit take?

Question231: Which of the following statements is correct regarding the antivirus scanning function on the FortiGate unit?

Question232: Which IPsec configuration mode can be used for implementing GRE-over-IPsec VPNs?.

Question233: An administrator is examining the attack logs and notices the following entry:

Based on the information displayed in this entry, which of the following statements are correct? (Select all that apply.)

Question234: Which answer best describes what an "Unknown Application" is?

Question235: What protocol cannot be used with the active authentication type?

Question236: The default administrator profile that is assigned to the default "admin" user on a FortGate device is:
_______________.

Question237: Which statements about virtual domains (VDOMs) are true? (Choose two.)

Question238: Which traffic can match a firewall policy's "Services" setting? (Choose three.)

Question239: Which FSSO agents are required for a FSSO agent-based polling mode solution?

Question240: In order to match an identity-based policy, the FortiGate unit checks the IP information. Once inside the policy, the following logic is followed:

Question241: When firewall policy authentication is enabled, which protocols can trigger an authentication challenge?
(Choose two.)

Question242: Bob wants to send Alice a file that is encrypted using public key cryptography.
Which of the following statements is correct regarding the use of public key cryptography in this scenario?

Question243: Which of the following statements is true regarding the differences between route-based and policy-based IPsec VPNs? (Choose two.)

Question244: A FortiGate is configured to receive push updates from the FortiGuard Distribution Network, however, they are not being received.
Which is one reason for this problem?

Question245: Which best describes the authentication timeout?

Question246: Which of the following are possible actions for static URL filtering? (Choose three.)