EMT Practice Test

1. Question Content...

---

Question1: Which action FortiGate performs on traffic that is subject to a per-IP traffic shaper of 10 Mbps?

Question2: What is the lnkmtd process responsible for?

Question3: In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two )

Question4: What are two roles that SD-WAN orchestrator plays when it works with FortiManager? (Choose two )

Question5: In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two )

Question6: What are two roles that SD-WAN orchestrator plays when it works with FortiManager? (Choose two )

Question7: Refer to exhibits.


Exhibit A shows the firewall policy and exhibit B shows the traffic shaping policy.
The traffic shaping policy is being applied to all outbound traffic; however, inbound traffic is not being evaluated by the shaping policy.
Based on the exhibits, what configuration change must be made in which policy so that traffic shaping can be applied to inbound traffic?

Question8: Which two statements reflect the benefits of implementing the ADVPN solution to replace conventional VPN topologies? (Choose two )

Question9: Which diagnostic command you can use to show interface-specific SLA logs for the last 10 minutes?

Question10: Which two tasks about using central VPN management are true? (Choose two.)

Question11: Refer to the exhibit.

Which statement about the command route-tag in the SD-WAN rule is true?

Question12: What are two benefits of using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two.)

Question13: Refer to the exhibit.

What must you configure to enable ADVPN?

Question14: Which diagnostic command can you use to show interface-specific SLA logs for the last 10 minutes?

Question15: What are two roles that SD-WAN orchestrator plays when it works with FortiManager? (Choose two.)

Question16: Why is it effective to use SD WAN rules when configuring application control?

Question17: Refer to exhibits.


Exhibit A shows the source NAT global setting and exhibit B shows the routing table on FortiGate.
Based on the exhibits, which two statements about increasing the port2 interface priority to 20 are true? (Choose two.)

Question18: What is the lnkmtd process responsible for?

Question19: Refer to the exhibit.

Which two statements about the IPsec VPN configuration and the status of the IPsec VPN tunnel are true? (Choose two.)

Question20: Which statement reflects how BGP tags work with SD-WAN rules?

Question21: Refer to the exhibit.

Multiple IPsec VPNs are formed between two hub-and-spokes groups, and site-to-site between Hub 1 and Hub 2 The administrator configured ADVPN on the dual regions topology Which two statements are correct if a dynamic site-to-site tunne1 between Toronto and London has been established? (Choose two)

Question22: Refer to exhibits.
Exhibit A.

Exhibit B.

Exhibit A shows the source NAT global setting and exhibit B shows the routing table on FortiGate Based on the exhibits, which two statements about increasing the port2 interface priority to 20 are true? (Choose two )

Question23: Which statement about using BGP routes in SD-WAN is true?

Question24: Which two protocols in the IPsec suite are most used for authentication and encryption? (Choose two)

Question25: Refer to the exhibit.

Which statement about the command route-tag in the SD-WAN rule is true?

Question26: Refer to the exhibit.

Which statement about the trace evaluation by FortiGate is true?

Question27: What would best describe the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?

Question28: Which statement defines how a per-IP traffic shaper of 10 Mbps is applied to the entire network?

Question29: Refer to exhibits.


Exhibit A shows the performance SLA exhibit B shows the SD-WAN diagnostics output.
Based on the exhibits, which statement is correct?

Question30: Refer to the exhibit.

Which two statements about the status of the VPN tunnel are true? <Choose two )

Question31: What are two benefits of using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two )

Question32: Which three parameters are available to configure SD-WAN rules? (Choose three.)

Question33: Refer to the exhibits.


Exhibit A shows the SD-WAN performance SLA and exhibit B shows the SD-WAN member and the static routes configuration.
If port2 is detected dead by FortiGate, which expected behavior is correct?

Question34: What are the two minimum configuration requirements for an outgoing interface to be selected once the SD-WAN logical interface is enabled? (Choose two )

Question35: Which three parameters are available to configure SD-WAN rules? (Choose three.)

Question36: Refer to the exhibit.

Which two conclusions for traffic that matches the traffic shaper are true? (Choose two.)

Question37: Refer to the exhibit.

Based on the output, which two conclusions are true? (Choose two.)

Question38: Refer to the exhibit.
Multiple IPsec VPNs are formed between two hub-and-spokes groups, and site-to-site between Hub 1 and Hub 2 The administrator configured ADVPN on the dual regions topology

Which two statements are correct if a user in Toronto sends traffic to London? (Choose two )

Question39: What are the two minimum configuration requirements for an outgoing interface to be selected once the SD-WAN logical interface is enabled? (Choose two )

Question40: Refer to the exhibit.

Based on the output shown in the exhibit, which two criteria on the SD-WAN member configuration can be used to select an outgoing interface in an SD-WAN rule? (Choose two.)

Question41: Refer to the exhibit.

Which two statements about the debug output are correct? (Choose two )

Question42: Refer to exhibits.
Exhibit A.

Exhibit B.

Exhibit A shows the SD-WAN performance SLA and exhibit B shows the SO-WAN interface and the static routes configuration.
Port1 and port2 are member interfaces of the SD-WAN, and port2 becomes a dead member after reaching the failure thresholds Which statement about the dead member is correct?

Question43: What are two reasons for using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two )

Question44: Refer to exhibits.


Exhibit A shows the firewall policy and exhibit B shows the traffic shaping policy.
The traffic shaping policy is being applied to all outbound traffic; however, inbound traffic is not being evaluated by the shaping policy.
Based on the exhibits, what configuration change must be made in which policy so that traffic shaping can be applied to inbound traffic?

Question45: Refer to the exhibit.

FortiGate has multiple dial-up VPN interfaces incoming on port1 that match only FIRST_VPN.
Which two configuration changes must be made to both IPsec VPN interfaces to allow incoming connections to match all possible IPsec dial-up interfaces? (Choose two.)

Question46: When attempting to establish an IPsec tunnel to FortiGate, all remote users match the FIRST_VPN IPsec VPN. This includes remote users that want to connect to the SECOND_VPN IPsec VPN. Which two configuration changes must you make on both IPsec VPNs so that remote users can connect to their intended IPsec VPN? (Choose two.)

Question47: Refer to the exhibit.

Which two statements about the debug output are true? (Choose two)

Question48: What are two reasons why it is effective to implement the internet service database (ISDB) in an SD-WAN rule? (Choose two )

Question49: What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process? (Choose two.)

Question50: What are two benefits of using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two )

Question51: Refer to exhibits.

Exhibit B.

Exhibit A shows the firewall policy and exhibit B shows the traffic shaping policy.
The traffic shaping policy is being applied to all outbound traffic however inbound traffic is not being evaluated by the shaping policy Based on the exhibit, what configuration change must be made in which policy so that traffic shaping can be applied to inbound traffic'?

Question52: Refer to the exhibit.

Which statement about the trace evaluation by FomGate is true?

Question53: Which statement is correct about the SD-WAN and ADVPN?

Question54: What are two reasons why it is effective to implement the internet service database (ISDB) in an SD-WAN rule? (Choose two )

Question55: Refer to exhibits.


Exhibit A shows the firewall policy and exhibit B shows the traffic shaping policy.
The traffic shaping policy is being applied to all outbound traffic; however, inbound traffic is not being evaluated by the shaping policy.
Based on the exhibits, what configuration change must be made in which policy so that traffic shaping can be applied to inbound traffic?

Question56: Refer to Exhibit:

Which statement is correct it the responder FortiGate is using a dynamic routing protocol over the IPsec VPN interface?

Question57: Which diagnostic command you can use to show interface-specific SLA logs for the last 10 minutes?

Question58: In which two ways does FortiGate learn the FortiManager IP address or FQDN for zero-touch provisioning? (Choose two.)

Question59: What would best describe the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?