EMT Practice Test

1. Question Content...

---

Question1: Which of the following route attributes must be equal for static routes to be eligible for equal cost multipath (ECMP) routing? (Choose two.)

Question2: Which statements best describe auto discovery VPN (ADVPN). (Choose two.)

Question3: An administrator has enabled the DHCP Server on the port1 interface and configured the following based on the exhibit.

Which statement is correct based on this configuration?
Response:

Question4: An administrator has configured two VLAN interfaces:

A DHCP server is connected to the VLAN10 interface. A DHCP client is connected to the VLAN5 interface.
However, the DHCP client cannot get a dynamic IP address from the DHCP server. What is the cause of the problem?

Question5: Which configuration objects can be selected for the Source field of a firewall policy? (Choose two.)

Question6: An administrator wants to block HTTP uploads. Examine the exhibit, which contains the proxy address created for that purpose.

Where must the proxy address be used?

Question7: What FortiGate configuration is required to actively prompt users for credentials?

Question8: Which of the following statements correctly describes FortiGates route lookup behavior when searching for a suitable gateway? (Choose two)

Question9: Which of the following statements about the FSSO collector agent timers is true?

Question10: NGFW mode allows policy-based configuration for most inspection rules. Which security profile's configuration does not change when you enable policy-based inspection?

Question11: In a high availability (HA) cluster operating in active-active mode, which of the following correctly describes the path taken by the SYN packet of an HTTP session that is offloaded to a secondary FortiGate?

Question12: Which of the following statements about central NAT are true? (Choose two.)

Question13: An administrator has configured a route-based IPsec VPN between two FortiGate devices. Which statement about this IPsec VPN configuration is true?

Question14: What files are sent to FortiSandbox for inspection in flow-based inspection mode?

Question15: Which statements about antivirus scanning mode are true? (Choose two.)

Question16: Which Statements about virtual domains (VDOMs) arc true? (Choose two.)

Question17: View the exhibit. Which of the following statements is true regarding the configuration settings?

Response:

Question18: An administrator is attempting to allow access to https://fortinet.com through a firewall policy that is configured with a web filter and an SSL inspection profile configured for deep inspection. Which of the following are possible actions to eliminate the certificate error generated by deep inspection? (Choose two.)

Question19: Which of the following statements about converse mode are true? (Choose two.)

Question20: An administrator needs to strengthen the security for SSL VPN access. Which of the following statements are best practices to do so? (Choose three.)

Question21: Which statement is true regarding the policy ID number of a firewall policy?

Question22: An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)

Question23: Which statements about DNS filter profiles are true? (Choose two.)

Question24: Which of the following statements are best practices for troubleshooting FSSO? (Choose two.)

Question25: Which of the following conditions must be met in order for a web browser to trust a web server certificate signed by a third-party CA?

Question26: An administrator needs to create an SSL-VPN connection for accessing an internal server using the bookmark Port Forward. What step is required for this configuration?

Question27: What information is flushed when the chunk-size value is changed in the config dlp settings?

Question28: An administrator has configured the following settings:

What does the configuration do? (Choose two.)

Question29: How can you block or allow to Twitter using a firewall policy?

Question30: Which of the following services can be inspected by the DLP profile? (Choose three.)