EMT Practice Test

1. Question Content...

---

Question1: Refer to exhibits.


Exhibit A shows the SD-WAN rules and exhibit B shows the traffic logs. The SD-WAN traffic logs reflect how FortiGate processed traffic.
Which two statements about how the configured SD-WAN rules are processing traffic are true? (Choose two.)

Question2: Refer to Exhibit:

Based on the exhibit, which algorithm does SD-WAN use to distribute traffic that does not match any of the SD-WAN rules, among the member interfaces?

Question3: Refer to the exhibit.

What must you configure to enable ADVPN?

Question4: When attempting to establish an IPsec tunnel to FortiGate, all remote users match the FIRST_VPN IPsec VPN. This includes remote users that want to connect to the SECOND_VPN IPsec VPN. Which two configuration changes must you make on both IPsec VPNs so that remote users can connect to their intended IPsec VPN? (Choose two.)

Question5: Which diagnostic command can you use to show the SD-WAN rules interface information and state?

Question6: What are two reasons why it is effective to implement the internet service database (ISDB) in an SD-WAN rule? (Choose two )

Question7: Refer to the exhibit.

Which two conclusions for traffic that matches the traffic shaper are true? (Choose two.)

Question8: Refer to exhibits.
Exhibit A.

Exhibit B.

Exhibit A shows the SD-WAN performance SLA and exhibit B shows the SO-WAN interface and the static routes configuration.
Port1 and port2 are member interfaces of the SD-WAN, and port2 becomes a dead member after reaching the failure thresholds Which statement about the dead member is correct?

Question9: Which two reasons make forward error correction (FEC) ideal to enable in a phase one VPN interface? (Choose two )

Question10: Refer to the exhibit.

Which two statements about the IPsec VPN configuration and the status of the IPsec VPN tunnel are true? (Choose two.)

Question11: Refer to the exhibit.

Based on output shown in the exhibit, which two commands can be used by SD-WAN rules? (Choose two.)

Question12: Which three protocols are available only on the command line to configure as performance SLA status check? (Choose three.)

Question13: What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process? (Choose two.)

Question14: Which two protocols in the IPsec suite are most used for authentication and encryption? (Choose two)

Question15: Refer to the exhibit.

Which are two expected behaviors of the traffic that matches the traffic shaper? (Choose two.)

Question16: Which statement is correct about SD-WAN and ADVPN?

Question17: An administrator is troubleshooting VoIP quality issues that occur when calling external phone numbers The SD-WAN interface on the edge FortiGate is configured with the default settings, and is using two upstream links One link has random jitter and latency issues and is based on a wireless connection Which two actions must the administrator apply simultaneously on the edge FortiGate to improve VoIP quality using SD_WAN rules?

Question18: Which action FortiGate performs on traffic that is subject to a per-IP traffic shaper of 10 Mbps?

Question19: Refer to the exhibits.


ExhibitA shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate.
Based on the FortiGate configuration shown in the exhibits, what issue might you encounter when creating an SD-WAN zone for port1 and port2?

Question20: What are two roles that SD-WAN orchestrator plays when it works with FortiManager? (Choose two )

Question21: Refer to the exhibit.

Based on the output shown in the exhibit, which two criteria on the SD-WAN member configuration can be used to select an outgoing interface in an SD-WAN rule? (Choose two.)

Question22: Refer to the exhibit.

Which two statements about the debug output are true? (Choose two)

Question23: Refer to the exhibit.

Which conclusion about the packet debug flow output is correct?

Question24: Refer to the exhibit. Which conclusion about the packet debug flow output is correct?

Question25: Which CLI command do you use to perform real-time troubleshooting for ADVPN negotiation?

Question26: Refer to the exhibit.

FortiGate has multiple dial-up VPN interfaces incoming on port1 that match only FIRST_VPN.
Which two configuration changes must be made to both IPsec VPN interfaces to allow incoming connections to match all possible IPsec dial-up interfaces? (Choose two.)

Question27: Refer to the exhibit.

Based on the exhibit, which status description is correct?

Question28: Refer to Exhibit:

Which statement is correct it the responder FortiGate is using a dynamic routing protocol over the IPsec VPN interface?

Question29: Which diagnostic command you can use to show interface-specific SLA logs for the last 10 minutes?

Question30: Which statement defines how a per-IP traffic shaper of 10 Mbps is applied to the entire network?