EMT Practice Test

1. Question Content...

---

Question1: Refer to the exhibit.

Which contains a session diagnostic output. Which statement is true about the session diagnostic output?

Question2: Examine this FortiGate configuration:

How does the FortiGate handle web proxy traffic coming from the IP address 10.2.1.200 that requires authorization?

Question3: On FortiGate, which type of logs record information about traffic directly to and from the FortiGate management IP addresses?

Question4: What inspection mode does FortiGate use if it is configured as a policy-based next-generation firewall (NGFW)?

Question5: What is the effect of enabling auto-negotiate on the phase 2 configuration of an IPsec tunnel?

Question6: An administrator wants to simplify remote access without asking users to provide user credentials.
Which access control method provides this solution?

Question7: Refer to the exhibit.

Review the Intrusion Prevention System (IPS) profile signature settings. Which statement is correct in adding the FTP.Login.Failed signature to the IPS sensor profile?

Question8: Refer to the exhibits.
The exhibits show the firewall policies and the objects used in the firewall policies.
The administrator is using the Policy Lookup feature and has entered the search criteria shown in the exhibit.

Which policy will be highlighted, based on the input criteria?

Question9: Which two statements describe how the RPF check is used? (Choose two.)

Question10: Which statement about video filtering on FortiGate is true?

Question11: Which three criteria can a FortiGate use to look for a matching firewall policy to process traffic? (Choose three.)

Question12: If the Issuer and Subject values are the same in a digital certificate, which type of entity was the certificate issued to?

Question13: Which of statement is true about SSL VPN web mode?

Question14: Which statement about video filtering on FortiGate is true?

Question15: Refer to the exhibit.

The global settings on a FortiGate device must be changed to align with company security policies. What does the Administrator account need to access the FortiGate global settings?

Question16: An administrator is configuring an Ipsec between site A and siteB. The Remotes Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192. 16. 1.0/24 and the remote quick mode selector is 192. 16.2.0/24. How must the administrator configure the local quick mode selector for site B?

Question17: An administrator wants to configure Dead Peer Detection (DPD) on IPSEC VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when no traffic is observed in the tunnel.
Which DPD mode on FortiGate will meet the above requirement?

Question18: Refer to the exhibit.

Given the interfaces shown in the exhibit. which two statements are true? (Choose two.)

Question19: An administrator does not want to report the logon events of service accounts to FortiGate. What setting on the collector agent is required to achieve this?

Question20: Which two statements are true about the RPF check? (Choose two.)

Question21: Refer to the exhibit.

The Root and To_Internet VDOMs are configured in NAT mode. The DMZ and Local VDOMs are configured in transparent mode.
The Root VDOM is the management VDOM. The To_Internet VDOM allows LAN users to access the internet. The To_Internet VDOM is the only VDOM with internet access and is directly connected to ISP modem .
With this configuration, which statement is true?

Question22: An administrator configures FortiGuard servers as DNS servers on FortiGate using default settings.
What is true about the DNS connection to a FortiGuard server?

Question23: Which statements best describe auto discovery VPN (ADVPN). (Choose two.)

Question24: Which statement is correct regarding the use of application control for inspecting web applications?

Question25: Which of the following SD-WAN load balancing method use interface weight value to distribute traffic? (Choose two.)

Question26: Refer to the exhibits.
The exhibits show a network diagram and firewall configurations.
An administrator created a Deny policy with default settings to deny Webserver access for Remote-User2. Remote-User1 must be able to access the Webserver. Remote-User2 must not be able to access the Webserver.


In this scenario, which two changes can the administrator make to deny Webserver access for Remote-User2? (Choose two.)

Question27: An administrator is configuring an IPsec VPN between site A and site B. The Remote Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192. 168. 1.0/24 and the remote quick mode selector is 192. 168.2.0/24.
Which subnet must the administrator configure for the local quick mode selector for site B?

Question28: FortiGate is configured as a policy-based next-generation firewall (NGFW) and is applying web filtering and application control directly on the security policy. Which two other security profiles can you apply to the security policy? (Choose two.)

Question29: Refer to the exhibit.

The exhibit contains a network diagram, virtual IP, IP pool, and firewall policies configuration.
The WAN (port1) interface has the IP address 10.200. 1. 1/24.
The LAN (port3) interface has the IP address 10 .0.1.254. /24.
The first firewall policy has NAT enabled using IP Pool.
The second firewall policy is configured with a VIP as the destination address.
Which IP address will be used to source NAT the internet traffic coming from a workstation with the IP address 10.0. 1. 10?

Question30: Which of the following are valid actions for FortiGuard category based filter in a web filter profile ui proxy-based inspection mode? (Choose two.)

Question31: The IPS engine is used by which three security features? (Choose three.)

Question32: An administrator has a requirement to keep an application session from timing out on port 80. What two changes can the administrator make to resolve the issue without affecting any existing services running through FortiGate? (Choose two.)

Question33: Which feature in the Security Fabric takes one or more actions based on event triggers?

Question34: A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 fails to come up. The administrator has also re-entered the pre-shared key on both FortiGate devices to make sure they match.

Based on the phase 1 configuration and the diagram shown in the exhibit, which two configuration changes will bring phase 1 up? (Choose two.)

Question35: Which three security features require the intrusion prevention system (IPS) engine to function? (Choose three.)

Question36: Which three authentication timeout types are availability for selection on FortiGate? (Choose three.)

Question37: Which two statements are correct about a software switch on FortiGate? (Choose two.)

Question38: What are two characteristics of FortiGate HA cluster virtual IP addresses? (Choose two.)

Question39: Which two configuration settings are synchronized when FortiGate devices are in an active-active HA cluster? (Choose two.)

Question40: Which statement about the IP authentication header (AH) used by IPsec is true?

Question41: An organization requires remote users to send external application data running on their PCs and access FTP resources through an SSL/TLS connection.
Which FortiGate configuration can achieve this goal?

Question42: Which three statements are true regarding session-based authentication? (Choose three.)

Question43: Which timeout setting can be responsible for deleting SSL VPN associated sessions?

Question44: What are two benefits of flow-based inspection compared to proxy-based inspection? (Choose two.)

Question45: An administrator is running the following sniffer command:
Which three pieces of Information will be Included in me sniffer output? {Choose three.)

Question46: Which statement correctly describes NetAPI polling mode for the FSSO collector agent?

Question47: Refer to the exhibit, which contains a session diagnostic output.

Which statement is true about the session diagnostic output?

Question48: An administrator has configured the following settings:

What are the two results of this configuration? (Choose two.)

Question49: In consolidated firewall policies, IPv4 and IPv6 policies are combined in a single consolidated policy. Instead of separate policies. Which three statements are true about consolidated IPv4 and IPv6 policy configuration? (Choose three.)

Question50: Which two statements are correct regarding FortiGate FSSO agentless polling mode? (Choose two.)

Question51: Which two statements are true when FortiGate is in transparent mode? (Choose two.)

Question52: Refer to the exhibit to view the application control profile.

Based on the configuration, what will happen to Apple FaceTime?

Question53: Refer to the exhibit showing a debug flow output.

Which two statements about the debug flow output are correct? (Choose two.)

Question54: Which three options are the remote log storage options you can configure on FortiGate? (Choose three.)

Question55: An employee needs to connect to the office through a high-latency internet connection.
Which SSL VPN setting should the administrator adjust to prevent SSL VPN negotiation failure?

Question56: Which two statements about FortiGate FSSO agentless polling mode are true? (Choose two.)

Question57: What are two functions of the ZTNA rule? (Choose two.)

Question58: Refer to the exhibit.

Which contains a session list output. Based on the information shown in the exhibit, which statement is true?

Question59: Refer to the exhibits.
Exhibit A shows a network diagram. Exhibit B shows the firewall policy configuration and a VIP object configuration.
The WAN (port1) interface has the IP address 10.200.1.1/24.
The LAN (port3) interface has the IP address 10.0.1.254/24.


If the host 10.200.3.1 sends a TCP SYN packet on port 10443 to 10.200.1.10, what will the source address, destination address, and destination port of the packet be, after FortiGate forwards the packet to the destination?

Question60: Refer to the exhibit.


The exhibit contains the configuration for an SD-WAN Performance SLA, as well as the output of diagnose sys virtual-wan-link health-check . Which interface will be selected as an outgoing interface?

Question61: If Internet Service is already selected as Source in a firewall policy, which other configuration objects can be added to the Source filed of a firewall policy?

Question62: Refer to the exhibit.
The exhibit shows a diagram of a FortiGate device connected to the network and the firewall policy and IP pool configuration on the FortiGate device.

Which two actions does FortiGate take on internet traffic sourced from the subscribers? (Choose two.)

Question63: Refer to the exhibit.
Refer to the web filter raw logs.

Based on the raw logs shown in the exhibit, which statement is correct?

Question64: Refer to the exhibits to view the firewall policy (Exhibit A) and the antivirus profile (Exhibit B).


Which statement is correct if a user is unable to receive a block replacement message when downloading an infected file for the first time?

Question65: Refer to the exhibit.
An administrator added a configuration for a new RADIUS server. While configuring, the administrator selected the Include in every user group option.

What is the impact of using the Include in every user group option in a RADIUS configuration?

Question66: Refer to the exhibit.
Refer to the FortiGuard connection debug output.

Based on the output shown in the exhibit, which two statements are correct? (Choose two.)

Question67: Which of the following statements about central NAT are true? (Choose two.)

Question68: Refer to the exhibit.

Based on the raw log, which two statements are correct? (Choose two.)

Question69: Which two settings can be separately configured per VDOM on a FortiGate device? (Choose two.)

Question70: How does FortiGate act when using SSL VPN in web mode?