EMT Practice Test

1. Question Content...

---

Question1: Which of the following are valid actions for FortiGuard category based filter in a web filter profile ui proxy-based inspection mode? (Choose two.)

Question2: In an explicit proxy setup, where is the authentication method and database configured?

Question3: Which two statements are correct about SLA targets? (Choose two.)

Question4: Which scanning technique on FortiGate can be enabled only on the CLI?

Question5: Refer to the exhibit.
The exhibit shows the output of a diagnose command.

What does the output reveal about the policy route?

Question6: A network administrator has enabled SSL certificate inspection and antivirus on FortiGate. When downloading an EICAR test file through HTTP, FortiGate detects the virus and blocks the file. When downloading the same file through HTTPS, FortiGate does not detect the virus and the file can be downloaded.
What is the reason for the failed virus detection by FortiGate?

Question7: Which of the following statements about backing up logs from the CLI and downloading logs from the GUI are true? (Choose two.)

Question8: If the Services field is configured in a Virtual IP (VIP), which statement is true when central NAT is used?

Question9: In which two ways can RPF checking be disabled? (Choose two )

Question10: Which two configuration settings are synchronized when FortiGate devices are in an active-active HA cluster? (Choose two.)

Question11: Which statements best describe auto discovery VPN (ADVPN). (Choose two.)

Question12: Examine this output from a debug flow:

Why did the FortiGate drop the packet?

Question13: Which two statements are true when FortiGate is in transparent mode? (Choose two.)

Question14: Which of the following are purposes of NAT traversal in IPsec? (Choose two.)

Question15: An administrator is configuring an IPsec VPN between site A and site B.
The Remote Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192. 168. 1.0/24 and the remote quick mode selector is 192. 168.2.0/24.
Which subnet must the administrator configure for the local quick mode selector for site B?

Question16: Refer to the exhibit.




The exhibit contains a network diagram, central SNAT policy, and IP pool configuration.
The WAN (port1) interface has the IP address 10.200. 1. 1/24.
The LAN (port3) interface has the IP address 10.0. 1.254/24.
A firewall policy is configured to allow to destinations from LAN (port3) to WAN (port1).
Central NAT is enabled, so NAT settings from matching Central SNAT policies will be applied.
Which IP address will be used to source NAT the traffic, if the user on Local-Client (10.0. 1. 10) pings the IP address of Remote-FortiGate (10.200.3. 1)?

Question17: Which three authentication timeout types are availability for selection on FortiGate? (Choose three.)

Question18: Refer to the exhibit.

An administrator is running a sniffer command as shown in the exhibit.
Which three pieces of information are included in the sniffer output? (Choose three.)

Question19: Which three methods are used by the collector agent for AD polling? (Choose three.)

Question20: Why does FortiGate Keep TCP sessions in the session table for several seconds, even after both sides (client and server) have terminated the session?

Question21: Which two statements are correct regarding FortiGate FSSO agentless polling mode? (Choose two.)

Question22: Refer to the exhibits.
Exhibit A shows a topology for a FortiGate HA cluster that performs proxy-based inspection on traffic. Exhibit B shows the HA configuration and the partial output of the get system ha status command.


Based on the exhibits, which two statements about the traffic passing through the cluster are true? (Choose two.)

Question23: An administrator configures FortiGuard servers as DNS servers on FortiGate using default settings.
What is true about the DNS connection to a FortiGuard server?

Question24: Which statement correctly describes the use of reliable logging on FortiGate?

Question25: Refer to the exhibit.

The global settings on a FortiGate device must be changed to align with company security policies. What does the Administrator account need to access the FortiGate global settings?

Question26: Which two settings are required for SSL VPN to function between two FortiGate devices? (Choose two.)

Question27: Which two inspection modes can you use to configure a firewall policy on a profile-based next-generation firewall (NGFW)? (Choose two.)

Question28: A FortiGate is operating in NAT mode and configured with two virtual LAN (VLAN) sub interfaces added to the physical interface. Which statements about the VLAN sub interfaces can have the same VLAN ID, only if they have IP addresses in different subnets.

Question29: Refer to the exhibit.

An administrator has configured a performance SLA on FortiGate, which failed to generate any traffic.
Why is FortiGate not sending probes to 4.2.2.2 and 4.2.2.1 servers? (Choose two.)

Question30: Which two types of traffic are managed only by the management VDOM? (Choose two.)

Question31: Refer to the exhibits.
Exhibit A.

Exhibit B.

An administrator creates a new address object on the root FortiGate (Local-FortiGate) in the security fabric. After synchronization, this object is not available on the downstream FortiGate (ISFW).
What must the administrator do to synchronize the address object?

Question32: Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

Question33: Which CLI command will display sessions both from client to the proxy and from the proxy to the servers?

Question34: FortiGuard categories can be overridden and defined in different categories. To create a web rating override for example.com home page, the override must be configured using a specific syntax.
Which two syntaxes are correct to configure web rating for the home page? (Choose two.)

Question35: An administrator has a requirement to keep an application session from timing out on port 80. What two changes can the administrator make to resolve the issue without affecting any existing services running through FortiGate? (Choose two.)

Question36: Refer to the exhibits.
Exhibit A shows a network diagram. Exhibit B shows the firewall policy configuration and a VIP object configuration.
The WAN (port1) interface has the IP address 10.200.1.1/24.
The LAN (port3) interface has the IP address 10.0.1.254/24.


If the host 10.200.3.1 sends a TCP SYN packet on port 10443 to 10.200.1.10, what will the source address, destination address, and destination port of the packet be, after FortiGate forwards the packet to the destination?

Question37: Examine this PAC file configuration.
Which of the following statements are true? (Choose two.)

Question38: FortiGate is configured as a policy-based next-generation firewall (NGFW) and is applying web filtering and application control directly on the security policy. Which two other security profiles can you apply to the security policy? (Choose two.)

Question39: Which certificate value can FortiGate use to determine the relationship between the issuer and the certificate?

Question40: An administrator has configured the following settings:

What are the two results of this configuration? (Choose two.)

Question41: Which two statements are correct about a software switch on FortiGate? (Choose two.)

Question42: What inspection mode does FortiGate use if it is configured as a policy-based next-generation firewall (NGFW)?

Question43: You have enabled logging on your FortiGate device for Event logs and all Security logs, and you have set up logging to use the FortiGate local disk . What is the default behavior when the local disk is full?

Question44: Refer to the exhibit.

Given the routing database shown in the exhibit, which two statements are correct? (Choose two.)

Question45: What are two functions of ZTNA? (Choose two.)

Question46: Refer to the exhibit.

Examine the intrusion prevention system (IPS) diagnostic command.
Which statement is correct If option 5 was used with the IPS diagnostic command and the outcome was a decrease in the CPU usage?

Question47: Which of statement is true about SSL VPN web mode?

Question48: What is the limitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?

Question49: Consider the topology:
Application on a Windows machine <--{SSL VPN} -->FGT--> Telnet to Linux server.
An administrator is investigating a problem where an application establishes a Telnet session to a Linux server over the SSL VPN through FortiGate and the idle session times out after about 90 minutes. The administrator would like to increase or disable this timeout.
The administrator has already verified that the issue is not caused by the application or Linux server. This issue does not happen when the application establishes a Telnet connection to the Linux server directly on the LAN.
What two changes can the administrator make to resolve the issue without affecting services running through FortiGate? (Choose two.)

Question50: Which two actions can you perform only from the root FortiGate in a Security Fabric? (Choose two.)

Question51: An administrator needs to increase network bandwidth and provide redundancy.
What interface type must the administrator select to bind multiple FortiGate interfaces?