MoreExam
1. Question Content...
EXPLANATION
Answer: X - EXPLANATION Content.
Question1: Exhibits:Refer to the exhibits, which contain the network topology and BGP configuration for a hub.An administrator is trying to configure ADVPN with a hub-spoke VPN setup using iBGP. All the VPNs are up and connected to the hub. The hub is receiving route information from both spokes over iBGP; however, the spokes are not receiving route information from each other.What change must the administrator make to the hub BGP configuration so that the routes learned by one spoke are forwarded to the other spokes?
Question2: Which of the following statements are true regarding the SIP session helper and the SIP application layer gateway (ALG)? (Choose three.)
Question3: Refer to the exhibit, which contains a TCL script configuration on FortiManager.An administrator has configured the TCL script on FortiManager, but the TCL script failed to apply any changes to the managed device after being run.Why did the TCL script fail to make any changes to the managed device?
Question4: An LDAP user cannot authenticate against a FortiGate device.Examine the real time debug output shown in the exhibit when the user attempted the authentication; then answer the question below.Based on the output in the exhibit, what can cause this authentication problem?
Question5: Refer to the exhibit, which contains the partial output of the get vpn ipsec tunnel details command.Based on the output, which two statements are correct? (Choose two.)
Question6: Which two statements about the Security Fabric are true? (Choose two.)
Question7: A FortiGate has two default routes:All Internet traffic is currently using port1. The exhibit shows partial information for one sample session of Internet traffic from an internal user:What would happen with the traffic matching the above session if the priority on the first default route (IDd1) were changed from 5 to 20?
Question8: Which two conditions must be met for a statistic route to be active in the routing table? (Choose two.)
Question9: What conditions are required for two FortiGate devices to form an OSPF adjacency? (Choose three.)
Question10: Examine the following partial outputs from two routing debug commands; then answer the question below:Why the default route using port2 is not displayed in the output of the second command?
Question11: Which two statements about bulk configuration changes made using FortiManager CLI scripts are correct? (Choose two.)
Question12: An administrator has configured two FortiGate devices for an HA cluster. While testing HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary device. The administrator decides to enable the setting link-failed-signal to fix the problem.Which statement about this setting is true?
Question13: When using the SSL certificate inspection method for HTTPS traffic, how does FortiGate filter web requests when the browser client does not provide the server name indication (SNI) extension?
Question14: View the exhibit, which contains the output of a diagnose command, and then answer the question below.Which statements are true regarding the output in the exhibit? (Choose two.)
Question15: View the exhibit, which contains the output of a real-time debug, Which statement about this output is true?Which of the following statements is true regarding this output?
Question16: An administrator wants to capture ESP traffic between two FortiGates using the built-in sniffer.If the administrator knows that there is no NAT device located between both FortiGates, what command should the administrator execute?
Question17: Examine the following routing table and BGP configuration; then answer the question below.The BGP connection is up, but the local peer is NOT advertising the prefix 192.168.1.0/24 .Which configuration change will make the local peer advertise this prefix?
Question18: Refer to exhibit, which contains the output of a BGP debug command.Which statement explains why the state of the 10.200.3.1 peer is Connect?
Question19: View the following FortiGate configuration.All traffic to the Internet currently egresses from port1.The exhibit shows partial session information for Internet traffic from a user on the internal network:If the priority on route ID 1 were changed from 5 to 20, what would happen to traffic matching that user's session?
Question20: View the exhibit, which contains a partial web filter profile configuration, and then answer the question below.Which action will FortiGate take if a user attempts to access www.dropbox.com, which is categorized as File Sharing and Storage?
Question21: Examine the output of the 'diagnose ips anomaly list' command shown in the exhibit; then answer the question below.Which IP addresses are included in the output of this command?
Question22: View the exhibit, which contains a partial routing table, and then answer the question below.Assuming all the appropriate firewall policies are configured, which of the following pings will FortiGate route? (Choose two.)
Question23: An administrator has configured two FortiGate devices for an HA cluster. While testing the HA failover, the administrator noticed that some of the switches in the network continue to send traffic to the former primary unit. The administrator decides to enable the setting link-failed-signal to fix the problem .Which statement is correct regarding this command?
Question24: An administrator has configured the following CLI script on FortiManager, which failed to apply any changes to the managed device after being executed.Why didn't the script make any changes to the managed device?
Question25: What configuration changes can reduce the memory utilization in a FortiGate? (Choose two.)
Question26: Which statement about NGFW policy-based application filtering is true?
Question27: Examine the following partial output from two system debug commands; then answer the question below.Which of the following statements are true regarding the above outputs? (Choose two.)
Question28: Refer to the exhibit, which contains the partial output of a diagnose command.Based on the output, which two statements are correct? (Choose two.)
Question29: View the exhibit, which contains the output of a debug command, and then answer the question below.Which of the following statements about the exhibit are true? (Choose two.)
Question30: Examine the partial output from two web filter debug commands; then answer the question below:Based on the above outputs, which is the FortiGuard web filter category for the web site www.fgt99.com?
Question31: Which two statements about an auxiliary session are true? (Choose two.)
Question32: A corporate network allows Internet Access to FSSO users only. The FSSO user student does not have Internet access after successfully logged into the Windows AD network. The output of the 'diagnose debug authd fsso list' command does not show student as an active FSSO user. Other FSSO users can access the Internet without problems .What should the administrator check? (Choose two.)
Question33: A FortiGate's portl is connected to a private network. Its port2 is connected to the Internet. Explicit web proxy is enabled in port1 and only explicit web proxy users can access the Internet. Web cache is NOT enabled. An internal web proxy user is downloading a file from the Internet via HTTP .Which statements are true regarding the two entries in the FortiGate session table related with this traffic? (Choose two.)
Question34: Examine the output of the 'diagnose debug rating' command shown in the exhibit; then answer the question below.Which statement are true regarding the output in the exhibit? (Choose two.)
Question35: How does FortiManager handle FortiGuard requests from FortiGate devices, when it is configured as a local FDS?
Question36: Which real time debug should an administrator enable to troubleshoot RADIUS authentication problems?
Question37: Which two configuration settings change the behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.)
Question38: Examine the IPsec configuration shown in the exhibit; then answer the question below.An administrator wants to monitor the VPN by enabling the IKE real time debug using these commands:diagnose vpn ike log-filter src-addr4 10.0.10.1diagnose debug application ike -1diagnose debug enableThe VPN is currently up, there is no traffic crossing the tunnel and DPD packets are being interchanged between both IPsec gateways. However, the IKE real time debug does NOT show any output .Why isn't there any output?
Question39: View the exhibit, which contains the output of diagnose sys session list, and then answer the question below.If the HA ID for the primary unit is zero (0), which statement is correct regarding the output?
