EMT Practice Test

1. Question Content...

---

Question1: Which of the following statements describe WMI polling mode for the FSSO collector agent? (Choose two.)

Question2: An administrator has configured two VLAN interfaces:

A DHCP server is connected to the VLAN10 interface. A DHCP client is connected to the VLAN5 interface.
However, the DHCP client cannot get a dynamic IP address from the DHCP server. What is the cause of the problem?

Question3: What criteria does FortiGate use to look for a matching firewall policy to process traffic? (Choose two.)

Question4: Which Statements about virtual domains (VDOMs) arc true? (Choose two.)

Question5: View the exhibit.

Why is the administrator getting the error shown in the exhibit?

Question6: View the exhibit.

Based on this output, which statements are correct? (Choose two.)

Question7: Which one of the following processes is involved in updating IPS from FortiGuard?

Question8: A FortiGate device has multiple VDOMs. Which statement about an administrator account configured with the default prof_admin profile is true?

Question9: During the digital verification process, comparing the original and fresh hash results satisfies which security requirement?

Question10: Which statement is true regarding the policy ID number of a firewall policy?

Question11: When browsing to an internal web server using a web-mode SSL VPN bookmark, which IP address is used as the source of the HTTP request?

Question12: An administrator has configured central DNAT and virtual IPs. Which of the following can be selected in the firewall policy Destination field?

Question13: On a FortiGate with a hard disk, how can you upload logs to FortiAnalyzer or FortiManager? (Choose two.)

Question14: View the exhibit.

Based on the configuration shown in the exhibit, what statements about application control behavior are true?
(Choose two.)

Question15: Which of the following conditions are required for establishing an IPSec VPN between two FortiGate devices?
(Choose two.)

Question16: Which configuration objects can be selected for the Source field of a firewall policy? (Choose two.)

Question17: Examine the network diagram shown in the exhibit, then answer the following question:

Which one of the following routes is the best candidate route for FGT1 to route traffic from the Workstation to the Web server?

Question18: What information is flushed when the chunk-size value is changed in the config dlp settings?

Question19: Which of the following statements about backing up logs from the CLI and downloading logs from the GUI are true? (Choose two.)

Question20: Which statement about the IP authentication header (AH) used by IPsec is true?

Question21: Which statement best describes the role of a DC agent in an FSSO DC agent mode solution?
Response:

Question22: A FortiGate is operating in NAT mode and configured with two virtual LAN (VLAN) sub interfaces added to the physical interface.
Which statements about the VLAN sub interfaces can have the same VLAN ID, only if they have IP addresses in different subnets.

Question23: An administrator has configured the following settings:

What does the configuration do? (Choose two.)

Question24: Which of the following statements are true when using WPAD with the DHCP discovery method? (Choose two.)

Question25: Which of the following statements about policy-based IPsec tunnels are true? (Choose two.)

Question26: Which is the correct description of a hash result as it relates to digital certificates?

Question27: Why must you use aggressive mode when a local FortiGate IPSec gateway hosts multiple dialup tunnels?

Question28: You have tasked to design a new IPsec deployment with the following criteria:
* All satellite offices must connect to the two HQ sites.
* The satellite offices do not need to communicate directly with other satellite offices.
* Backup VPN is not required.
* The design should minimize the number of tunnels being configured.
Which topology should be used to satisfy all of the requirements?

Question29: Which statements are true regarding firewall policy NAT using the outgoing interface IP address with fixed port disabled? (Choose two.)

Question30: By default, when logging to disk, when does FortiGate delete logs?

Question31: You are configuring the root FortiGate to implement the security fabric. You are configuring port10 to communicate with a downstream FortiGate. View the default Edit Interface in the exhibit below:

When configuring the root FortiGate to communicate with a downstream FortiGate, which settings are required to be configured? (Choose two.)

Question32: Which statements best describe auto discovery VPN (ADVPN). (Choose two.)

Question33: View the exhibit.


What does this raw log indicate? (Choose two.)

Question34: Which of the following services can be inspected by the DLP profile? (Choose three.)

Question35: Examine this output from a debug flow:

Why did the FortiGate drop the packet?

Question36: An administrator needs to create an SSL-VPN connection for accessing an internal server using the bookmark Port Forward. What step is required for this configuration?

Question37: Which of the following statements correctly describes FortiGates route lookup behavior when searching for a suitable gateway? (Choose two)

Question38: Examine the network diagram shown in the exhibit, and then answer the following question:

A firewall administrator must configure equal cost multipath (ECMP) routing on FGT1 to ensure both port1 and port3 links are used at the same time for all traffic destined for 172.20.2.0/24. Which of the following static routes will satisfy this requirement on FGT1? (Choose two.)

Question39: An administrator wants to create a policy-based IPsec VPN tunnel betweeb two FortiGate devices. Which configuration steps must be performed on both devices to support this scenario? (Choose three.)

Question40: An administrator is configuring an antivirus profiles on FortiGate and notices that Proxy Options is not listed under Security Profiles on the GUI. What can cause this issue?

Question41: Which of the following static routes are not maintained in the routing table?

Question42: Refer to the following exhibit.



Why is FortiGate not blocking the test file over FTP download?

Question43: Which of the following SD-WAN load -balancing method use interface weight value to distribute traffic?
(Choose two.)

Question44: Which of the following FortiGate configuration tasks will create a route in the policy route table? (Choose two.)

Question45: An administrator is configuring an Ipsec between site A and siteB. The Remotes Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192.16.1.0/24 and the remote quick mode selector is 192.16.2.0/24. How must the administrator configure the local quick mode selector for site B?

Question46: View the exhibit.

VDOM1 is operating in transparent mode VDOM2 is operating in NAT Route mode. There is an inteface VDOM link between both VDOMs. A client workstation with the IP address 10.0.1.10/24 is connected to port2. A web server with the IP address 10.200.1.2/24 is connected to port1.
What is required in the FortiGate configuration to route and allow connections from the client workstation to the web server? (Choose two.)

Question47: Which certificate value can FortiGate use to determine the relationship between the issuer and the certificate?

Question48: Which statements about DNS filter profiles are true? (Choose two.)

Question49: If the Issuer and Subject values are the same in a digital certificate, which type of entity was the certificate issued to?