EMT Practice Test

1. Question Content...

---

Question1: Which is the correct description of a hash result as it relates to digital certificates?

Question2: HTTP Public Key Pinning (HPKP) can be an obstacle to implementing full SSL inspection. What solutions could resolve this problem? (Choose two.)

Question3: In a high availability (HA) cluster operating in active-active mode, which of the following correctly describes the path taken by the SYN packet of an HTTP session that is offloaded to a secondary FortiGate?

Question4: The FSSO Collector Agent set to advanced access mode for the Windows Active Directory uses which of the following?

Question5: Refer to the following exhibit.



Why is FortiGate not blocking the test file over FTP download?

Question6: Why must you use aggressive mode when a local FortiGate IPSec gateway hosts multiple dialup tunnels?

Question7: What criteria does FortiGate use to look for a matching firewall policy to process traffic? (Choose two.)

Question8: Which of the following statements about virtual domains (VDOMs) are true? (Choose two.)

Question9: When override is enabled, which of the following shows the process and selection criteria that are used to elect the primary FortiGate in an HA cluster?

Question10: Which statements are true regarding firewall policy NAT using the outgoing interface IP address with fixed port disabled? (Choose two.)

Question11: Which of the following statements are best practices for troubleshooting FSSO? (Choose two.)

Question12: What types of traffic and attacks can be blocked by a web application firewall (WAF) profile? (Choose three.)

Question13: Why does FortiGate keep TCP sessions in the session table for some seconds even after both sides (client and server) have terminated the session?

Question14: A team manager has decided that while some members of the team need access to particular website, the majority of the team does not. Which configuration option is the most effective option to support this request?

Question15: Examine the exhibit, which shows the partial output of an IKE real-time debug.

Which of the following statement about the output is true?

Question16: What files are sent to FortiSandbox for inspection in flow-based inspection mode?

Question17: Which statements best describe auto discovery VPN (ADVPN). (Choose two.)

Question18: Which of the following route attributes must be equal for static routes to be eligible for equal cost multipath (ECMP) routing? (Choose two.)

Question19: An administrator has configured a route-based IPsec VPN between two FortiGate devices. Which statement about this IPsec VPN configuration is true?

Question20: An administrator is attempting to allow access to https://fortinet.com through a firewall policy that is configured with a web filter and an SSL inspection profile configured for deep inspection. Which of the following are possible actions to eliminate the certificate error generated by deep inspection? (Choose two.)

Question21: You are configuring the root FortiGate to implement the security fabric. You are configuring port10 to communicate with a downstream FortiGate. View the default Edit Interface in the exhibit below:

When configuring the root FortiGate to communicate with a downstream FortiGate, which settings are required to be configured? (Choose two.)

Question22: Which of the following features is supported by web filter in flow-based inspection mode with NGFW mode set to profile-based?

Question23: Which statements about DNS filter profiles are true? (Choose two.)

Question24: Which statement is true regarding SSL VPN timers? (Choose two.)

Question25: Examine the network diagram shown in the exhibit, then answer the following question:

Which one of the following routes is the best candidate route for FGT1 to route traffic from the Workstation to the Web server?

Question26: Which of the following static routes are not maintained in the routing table?

Question27: An administration wants to throttle the total volume of SMTP sessions to their email server. Which of the following DoS sensors can be used to achieve this?

Question28: An administrator wants to block HTTP uploads. Examine the exhibit, which contains the proxy address created for that purpose.

Where must the proxy address be used?

Question29: Which of the following services can be inspected by the DLP profile? (Choose three.)

Question30: How can you block or allow to Twitter using a firewall policy?

Question31: View the exhibit.

A user behind the FortiGate is trying to go to http://www.addictinggames.com (Addicting Games). Based on this configuration, which statement is true?

Question32: NGFW mode allows policy-based configuration for most inspection rules. Which security profile's configuration does not change when you enable policy-based inspection?

Question33: Which statements correctly describe transparent mode operation? (Choose three.)

Question34: Which of the following SD-WAN load -balancing method use interface weight value to distribute traffic?
(Choose two.)

Question35: Examine the IPS sensor configuration shown in the exhibit, and then answer the question below.

What are the expected actions if traffic matches this IPS sensor? (Choose two.)

Question36: What information is flushed when the chunk-size value is changed in the config dlp settings?

Question37: Which statement about DLP on FortiGate is true?

Question38: Which of the following conditions must be met in order for a web browser to trust a web server certificate signed by a third-party CA?

Question39: An administrator is configuring an Ipsec between site A and siteB. The Remotes Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192.16.1.0/24 and the remote quick mode selector is 192.16.2.0/24. How must the administrator configure the local quick mode selector for site B?

Question40: View the exhibit.


What does this raw log indicate? (Choose two.)

Question41: What is the limitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?

Question42: Which of the following are valid actions for FortiGuard category based filter in a web filter profile ui proxy- based inspection mode? (Choose two.)

Question43: Which of the following statements about the FSSO collector agent timers is true?

Question44: Examine the network diagram shown in the exhibit, and then answer the following question:

A firewall administrator must configure equal cost multipath (ECMP) routing on FGT1 to ensure both port1 and port3 links are used at the same time for all traffic destined for 172.20.2.0/24. Which of the following static routes will satisfy this requirement on FGT1? (Choose two.)

Question45: A FortiGate device has multiple VDOMs. Which statement about an administrator account configured with the default prof_admin profile is true?