MoreExam
1. Question Content...
EXPLANATION
Answer: X - EXPLANATION Content.
Question1: Refer to the exhibit showing an SD-WAN configuration.According to the exhibit, if an internal user pings 10.1.100.2 and 10.1.100.22 from subnet 172.16.205.0/24, which outgoing interfaces will be used?
Question2: Refer to the exhibit showing the history logs from a FortiMail device.Which FortiMail email security feature can an administrator enable to treat these emails as spam?
Question3: An automation stitch was configured using an incoming webhook as the trigger named 'my_incoming_webhook'. The action is configured to execute the CLI Script shown:
Question4: Refer to the exhibits.The exhibits show a FortiMail network topology, Inbound configuration settings, and a Dictionary Profile.You are required to integrate a third-party's host service (srv.thirdparty.com) into the e-mail processing path.All inbound e-mails must be processed by FortiMail antispam and antivirus with FortiSandbox integration. If the email is clean, FortiMail must forward it to the third-party service, which will send the email back to FortiMail for final delivery, FortiMail must not scan the e-mail again.Which three configuration tasks must be performed to meet these requirements? (Choose three.)
Question5: You must analyze an event that happened at 20:37 UTC. One log relevant to the event is extracted from FortiGate logs:The devices and the administrator are all located in different time zones Daylight savings time (DST) is disabled* The FortiGate is at GMT-1000.* The FortiAnalyzer is at GMT-0800* Your browser local time zone is at GMT-03.00You want to review this log on FortiAnalyzer GUI, what time should you use as a filter?
Question6: Refer to the exhibit.A FortiWeb appliance is configured for load balancing web sessions to internal web servers. The Server Pool is configured as shown in the exhibit.How will the sessions be load balanced between server 1 and server 2 during normal operation?
Question7: Refer to the exhibit, which shows a Branch1 configuration and routing table.In the SD-WAN implicit rule, you do not want the traffic load balance for the overlay interface when all members are available.In this scenario, which configuration change will meet this requirement?
Question8: Refer to the exhibit.You are deploying a FortiGate 6000F. The device should be directly connected to a switch. In the future, a new hardware module providing higher speed will be installed in the switch, and the connection to the FortiGate must be moved to this higher-speed port.You must ensure that the initial FortiGate interface connected to the switch does not affect any other port when the new module is installed and the new port speed is defined.How should the initial connection be made?
Question9: Refer to the CLI configuration of an SSL inspection profile from a FortiGate device configured to protect a web server:Based on the information shown, what is the expected behavior when an HTTP/2 request comes in?
Question10: Review the VPN configuration shown in the exhibit.What is the Forward Error Correction behavior if the SD-WAN network traffic download is 500 Mbps and has 8% of packet loss in the environment?
Question11: Refer to the exhibit.A customer wants FortiClient EMS configured to deploy to 1500 endpoints. The deployment will be integrated with FortiOS and there is an Active Directory server.Given the configuration shown in the exhibit, which two statements about the installation are correct? (Choose two.)
Question12: You are responsible for recommending an adapter type for NICs on a FortiGate VM that will run on an ESXi Hypervisor. Your recommendation must consider performance as the main concern, cost is not a factor. Which adapter type for the NICs will you recommend?
Question13: You are deploying a FortiExtender (FEX) on a FortiGate-60F. The FEX will be managed by the FortiGate. You anticipate high utilization. The requirement is to minimize the overhead on the device for WAN traffic.Which action achieves the requirement in this scenario?
Question14: Refer to the exhibits.A customer is looking for a solution to authenticate the clients connected to a hardware switch interface of a FortiGate 400E.Referring to the exhibits, which two conditions allow authentication to the client devices before assigning an IP address? (Choose two.)
Question15: You are troubleshooting a FortiMail Cloud service integrated with Office 365 where outgoing emails are not reaching the recipients' mail What are two possible reasons for this problem? (Choose two.)
Question16: Wh.ch feature must you enable on the BGP neighbors to accomplish this goal?
Question17: A customer's cybersecurity department needs to implement security for the traffic between two VPCs in AWS, but these belong to different departments within the company. The company uses a single region for all their VPCs.Which two actions will achieve this requirement while keeping separate management of each department's VPC? (Choose two.)
Question18: You want to use the MTA adapter feature on FortiSandbox in an HA-Cluster. Which statement about this solution is true?
Question19: Refer to the exhibits.A customer wants to deploy 12 FortiAP 431F devices on high density conference center, but they do not currently have any PoE switches to connect them to. They want to be able to run them at full power while having network redundancy From the FortiSwitch models and sample retail prices shown in the exhibit, which build of materials would have the lowest cost, while fulfilling the customer's requirements?
Question20: You must configure an environment with dual-homed servers connected to a pair of FortiSwitch units using an MCLAG.Multicast traffic is expected in this environment, and you should ensure unnecessary traffic is pruned from links that do not have a multicast listener.In which two ways must you configure the igmps-f lood-traffic and igmps-flood-report settings? (Choose two.)
Question21: Refer to the exhibit, which shows a VPN topology.The device IP 10.1.100.40 downloads a file from the FTP server IP 192.168.4.50 Referring to the exhibit, what will be the traffic flow behavior if ADVPN is configured in this environment?
Question22: What is the benefit of using FortiGate NAC LAN Segments?
Question23: Refer to the exhibit.To facilitate a large-scale deployment of SD-WAN/ADVPN with FortiGate devices, you are tasked with configuring the FortiGate devices to support injecting of IKE routes on the ADVPN shortcut tunnels.Which three commands must be added or changed to the FortiGate spoke config vpn ipsec phasei-interface options referenced in the exhibit for the VPN interface to enable this capability? (Choose three.)
Question24: You must configure an environment with dual-homed servers connected to a pair of FortiSwitch units using an MCLAG.Multicast traffic is expected in this environment, and you should ensure unnecessary traffic is pruned from links that do not have a multicast listener.In which two ways must you configure the igmps-f lood-traffic and igmps-flood-report settings? (Choose two.)
Question25: A retail customer with a FortiADC HA cluster load balancing five webservers in L7 Full NAT mode is receiving reports of users not able to access their website during a sale event. But for clients that were able to connect, the website works fine.CPU usage on the FortiADC and the web servers is low, application and database servers are still able to handle more traffic, and the bandwidth utilization is under 30%.Which two options can resolve this situation? (Choose two.)
Question26: Refer to the exhibit.The exhibit shows two error messages from a FortiGate root Security Fabric device when you try to configure a new connection to a FortiClient EMS Server.Referring to the exhibit, which two actions will fix these errors? (Choose two.)
Question27: Refer to the exhibits.A FortiGate cluster (CL-1) protects a data center hosting multiple web applications. A pair of FortiADC devices are already configured for SSL decryption (FAD-1), and re-encryption (FAD-2). CL-1 must accept unencrypted traffic from FAD-1, perform application detection on the plain-text traffic, and forward the inspected traffic to FAD-2.The SSL-Offload-App-Detect application list and SSL-Offload protocol options profile are applied to the firewall policy handling the web application traffic on CL-1.Given this scenario, which two configuration tasks must the administrator perform on CL-1? (Choose two.) A)B)
Question28: Refer to the exhibit.You have deployed a security fabric with three FortiGate devices as shown in the exhibit. FGT_2 has the following configuration:FGT_1 and FGT_3 are configured with the default setting. Which statement is true for the synchronization of fabric-objects?
Question29: A customer with a FortiDDoS 200F protecting their fibre optic internet connection from incoming traffic sees that all the traffic was dropped by the device even though they were not under a DoS attack. The traffic flow was restored after it was rebooted using the GUI. Which two options will prevent this situation in the future? (Choose two)
