EMT Practice Test

1. Question Content...

---

Question1: Refer to the exhibit.

Which contains a session list output. Based on the information shown in the exhibit, which statement is true?

Question2: Which of the following statements about central NAT are true? (Choose two.)

Question3: What types of traffic and attacks can be blocked by a web application firewall (WAF) profile? (Choose three.)

Question4: Which statement about the policy ID number of a firewall policy is true?

Question5: Which three methods are used by the collector agent for AD polling? (Choose three.)

Question6: What is the effect of enabling auto-negotiate on the phase 2 configuration of an IPsec tunnel?

Question7: Refer to the exhibit.

The exhibit shows a CLI output of firewall policies, proxy policies, and proxy addresses.
How
does FortiGate process the traffic sent to http://www.fortinet.com?

Question8: Which CLI command allows administrators to troubleshoot Layer 2 issues, such as an IP address conflict?

Question9: Which of the following statements correctly describes FortiGates route lookup behavior when searching for a suitable gateway? (Choose two)

Question10: Which Security rating scorecard helps identify configuration weakness and best practice violations in your network?

Question11: Which three criteria can a FortiGate use to look for a matching firewall policy to process traffic? (Choose three.)

Question12: Which two statements ate true about the Security Fabric rating? (Choose two.)

Question13: Which of the following statements is true regarding SSL VPN settings for an SSL VPN portal?

Question14: Which two protocols are used to enable administrator access of a FortiGate device? (Choose two.)

Question15: Refer to the exhibit, which contains a static route configuration.

An administrator created a static route for Amazon Web Services.
What CLI command must the administrator use to view the route?

Question16: View the exhibit:

Which the FortiGate handle web proxy traffic rue? (Choose two.)

Question17: Refer to the exhibit.

In the network shown in the exhibit, the web client cannot connect to the HTTP web server. The administrator runs the FortiGate built-in sniffer and gets the output as shown in the exhibit.
What should the administrator do next to troubleshoot the problem?

Question18: Refer to the exhibits.


The SSL VPN connection fails when a user attempts to connect to it. What should the user do to successfully connect to SSL VPN?

Question19: Refer to the exhibits.


The exhibits show the SSL and authentication policy (Exhibit A) and the security policy (Exhibit B) tor Facebook.
Users are given access to the Facebook web application. They can play video content hosted on Facebook but they are unable to leave reactions on videos or other types of posts.
Which part of the policy configuration must you change to resolve the issue?

Question20: Refer to the exhibits.


Exhibit A shows system performance output. Exhibit B shows a FortiGate configured with the default configuration of high memory usage thresholds. Based on the system performance output, which two statements are correct? (Choose two.)

Question21: To complete the final step of a Security Fabric configuration, an administrator must authorize all the devices on which device?

Question22: Which statements best describe auto discovery VPN (ADVPN). (Choose two.)

Question23: Examine the two static routes shown in the exhibit, then answer the following question.

Which of the following is the expected FortiGate behavior regarding these two routes to the same destination?

Question24: A network administrator wants to set up redundant IPsec VPN tunnels on FortiGate by using two IPsec VPN tunnels and static routes.
* All traffic must be routed through the primary tunnel when both tunnels are up
* The secondary tunnel must be used only if the primary tunnel goes down
* In addition, FortiGate should be able to detect a dead tunnel to speed up tunnel failover Which two key configuration changes are needed on FortiGate to meet the design requirements? (Choose two,)

Question25: Refer to the exhibit.

According to the certificate values shown in the exhibit, which type of entity was the certificate issued to?

Question26: An administrator is configuring an Ipsec between site A and siteB. The Remotes Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192.16.1.0/24 and the remote quick mode selector is 192.16.2.0/24. How must the administrator configure the local quick mode selector for site B?

Question27: Which two settings can be separately configured per VDOM on a FortiGate device? (Choose two.)

Question28: Refer to the exhibit.

Given the security fabric topology shown in the exhibit, which two statements are true? (Choose two.)

Question29: What inspection mode does FortiGate use if it is configured as a policy-based next-generation firewall (NGFW)?

Question30: An administrator needs to increase network bandwidth and provide redundancy.
What interface type must the administrator select to bind multiple FortiGate interfaces?

Question31: Refer to the exhibit.

The Root and To_Internet VDOMs are configured in NAT mode. The DMZ and Local VDOMs are configured in transparent mode.
The Root VDOM is the management VDOM. The To_Internet VDOM allows LAN users to access internet.
The To_lnternet VDOM is the only VDOM with internet access and is directly connected to ISP modem.
Which two statements are true? (Choose two.)

Question32: What is the primary FortiGate election process when the HA override setting is disabled?

Question33: NGFW mode allows policy-based configuration for most inspection rules. Which security profile's configuration does not change when you enable policy-based inspection?

Question34: Which two statements are true about collector agent standard access mode? (Choose two.)

Question35: Refer to the exhibit.

Based on the administrator profile settings, what permissions must the administrator set to run the diagnose firewall auth list CLI command on FortiGate?

Question36: You have enabled logging on your FortiGate device for Event logs and all Security logs, and you have set up logging to use the FortiGate local disk.
What is the default behavior when the local disk is full?

Question37: Which two VDOMs are the default VDOMs created when FortiGate is set up in split VDOM mode? (Choose two.)

Question38: Which three statements about security associations (SA) in IPsec are correct? (Choose three.)

Question39: Refer to the FortiGuard connection debug output.

Based on the output shown in the exhibit, which two statements are correct? (Choose two.)

Question40: Which two statements are correct about SLA targets? (Choose two.)

Question41: View the exhibit.

Which of the following statements are correct? (Choose two.)

Question42: Examine the exhibit, which contains a virtual IP and firewall policy configuration.



The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port2) interface has the IP address
10.0.1.254/24.
The first firewall policy has NAT enabled on the outgoing interface address. The second firewall policy is configured with a VIP as the destination address.
Which IP address will be used to source NAT the Internet traffic coming from a workstation with the IP address 10.0.1.10/24?

Question43: Refer to the exhibit showing a debug flow output.

Which two statements about the debug flow output are correct? (Choose two.)

Question44: Refer to the exhibit.

Given the interfaces shown in the exhibit. which two statements are true? (Choose two.)

Question45: Which two statements about antivirus scanning mode are true? (Choose two.)

Question46: Which three criteria can a FortiGate use to look for a matching firewall policy to process traffic? (Choose three.)

Question47: Refer to the exhibit.

The exhibits show a network diagram and the explicit web proxy configuration.
In the command diagnose sniffer packet, what filter can you use to capture the traffic between the client and the explicit web proxy?

Question48: Refer to the web filter raw logs.

Based on the raw logs shown in the exhibit, which statement is correct?

Question49: When browsing to an internal web server using a web-mode SSL VPN bookmark, which IP address is used as the source of the HTTP request?

Question50: Which three pieces of information does FortiGate use to identify the hostname of the SSL server when SSL certificate inspection is enabled? (Choose three.)