EMT Practice Test

1. Question Content...

---

Question1: Refer to the exhibit which shows an OSPF network.

Which types of link-state advertisements (LSA) will NGFW-1 send if it is a backup designated router (BDR)

Question2: Refer to the exhibit, which shows a routing table.

What two options can you configure in OSPF to block the advertisement of the 10.1.10.0 prefix? (Choose two.)

Question3: Exhibit.

Refer to the exhibit, which shows a partial touting table
What two concisions can you draw from the corresponding FortiGate configuration? (Choose two.)

Question4: You are testing the implementation of a new custom remote desktop application in your network In which two ways can you eliminate false positives in IPS during this testing phase? (Choose two)

Question5: Refer to the exhibit, which contains a TCL script configuration on FortiManager.

An administrator has configured the TCL script on FortiManager, but the TCL script failed to apply any changes to the managed device after being run.
Why did the TCL script fail to make any changes to the managed device?

Question6: Which two statements about IKE version 2 fragmentation are true? (Choose two.)

Question7: Which, three conditions are required for two FortiGate devices to form an OSPF adjacency? (Choose three.)

Question8: Winch two statements about ADVPN are true? (Choose two)

Question9: Refer to the exhibit, which shows device registration on FortiManager.

What can you conclude about the Spoke-1 and Spoke-2 configurations with respect to the information cond:
Modified (recent auto-updated)?

Question10: Which statement about the designated router (DR) and backup designated router (BDR) in an OSPF multi- access network is true?

Question11: Which two statements about the neighbor-group command are true? (Choose two.)

Question12: Exhibit.

Refer to the exhibit, which contains a partial VPN configuration.
What can you conclude from this configuration1?

Question13: Refer to the exhibit, which shows an error in system fortiguard configuration.

What is the reason you cannot set the protocol to udp in config system fortiguard?

Question14: Which statement is true regarding the Bidirectional Forwarding Detection protocol in BGP?

Question15: An administrator configured the following command on FortiGate
config router ospf
sec reszart-mode graceful-restart
Which two statements correctly describe the result of the above command? (Choose two.)

Question16: You want to block access to the website ww.eicar.org using a custom IPS signature.
Which custom IPS signature should you configure?

Question17: Refer to the exhibits, which show the configurations of two address objects from the same FortiGate.

Why can you modify the Engineering address object, but not the Finance address object?

Question18:

Refer to the exhibit, which shows information about an OSPF interface
What two conclusions can you draw from this command output? (Choose two.)

Question19: Exhibit.

Refer to the exhibit, which contains an active-active toad balancing scenario.
During the traffic flow the primary FortiGate forwards the SYN packet to the secondary FortiGate.
What is the destination MAC address or addresses when packets are forwarded from the primary FortiGate to the secondary FortiGate?

Question20: Exhibit.

Refer to the exhibit which provides information on BGP neighbors
What can you conclude from this command output?

Question21: You contoured an address object on the tool fortiGate in a Security Fabric. This object is not synchronized with a downstream device. Which two reasons could be the cause? (Choose two)

Question22: Refer to the exhibit, which contains a partial configuration of the global system.

What can you conclude from the output?

Question23: Refer to the exhibit.

The exhibit shows a prefix list configuration
What can you conclude from the above prefix-list configuration?

Question24: Refer to the exhibit, which shows config system central-management information.

Which setting must you configure for the web filtering feature to function?

Question25: How are bulk configuration changes made using FortiManager CLI scripts? (Choose two.)

Question26: Which two statements about the Security Fabric are true? (Choose two.)

Question27: Exhibit.

Refer to the exhibit, which contains the partial interface configuration of two FortiGate devices.
Which two conclusions can you draw from this con figuration? (Choose two)

Question28: Exhibit.

Refer to the exhibit, which shows an ADVPN network.
The client behind Spoke-1 generates traffic to the device located behind Spoke-2.
Which first message floes the hub send to Spoke-110 bring up the dynamic tunnel?

Question29:

Refer to the exhibit, which shows information about an OSPF interface
What two conclusions can you draw from this command output? (Choose two.)

Question30: Refer to the exhibit, which contains a partial BGP combination.

You want to configure a loopback as the OGP source.
Which two parameters must you set in the BGP configuration? (Choose two)

Question31: In which two ways does fortiManager function when it is deployed as a local FDS? (Choose two)

Question32: Exhibit.

Refer to the exhibit, which contains a partial policy configuration.
Which setting must you configure to allow SSH?

Question33: How are bulk configuration changes made using FortiManager CLI scripts? (Choose two.)

Question34: How would £=c-ingress and fec-sgress IPsec configuration affect an IPsec tunnel?

Question35: You want to configure faster failure detection for BGP
Which parameter should you enable on both connected FortiGate devices?

Question36: Refer to the exhibit, which shows an ADVPN network.

Which VPN phase 1 parameters must you configure on the hub for the ADVPN feature to function? (Choose two.)

Question37: Refer to the exhibits, which contain the network topology and BGP configuration for a hub.
Exhibit A.

Exhibit B.

An administrator is trying to configure ADVPN with a hub and spoke VPN setup using iBGP. All the VPNs are up and connected to the hub. The hub is receiving route information from both spokes over iBGP; however the spokes are not receiving route information from each other.
What change must the administrator make to the hub BGP configuration so that the routes learned from one spoke are forwarded to the other spoke?

Question38: Exhibit.

Refer to the exhibit, which contains the partial ADVPN configuration of a spoke.
Which two parameters must you configure on the corresponding single hub? (Choose two.)