MoreExam
1. Question Content...
EXPLANATION
Answer: X - EXPLANATION Content.
Question1: Refer to the exhibit showing a FortiView monitor screen.After a Secure SD-WAN implementation a customer reports that in FortiAnalyzer under FortiView Secure SD-WAN Monitor there is No Device for selection.What can cause this issue?
Question2: Refer to the exhibit, which shows an SD-WAN configuration.You configured the SD-WAN from Branch1 to the HUB and enabled packet duplication. You later notice that the traffic is not being duplicated. In this scenario, what is causing this problem?
Question3: A Hub FortiGate is connecting multiple branch FortiGate devices separating the traffic centrally in unique VRFs. Routing information is exchanged using BGP between the Hub and the Branch FortiGate devices.You want to efficiently enable route leaking of specific routes between the VRFs.Which two steps are required to achieve this requirement? (Choose two.)
Question4: A customer with a FortiDDoS 200F protecting their fibre optic internet connection from incoming traffic sees that all the traffic was dropped by the device even though they were not under a DoS attack. The traffic flow was restored after it was rebooted using the GUI. Which two options will prevent this situation in the future?(Choose two)
Question5: Refer to the exhibits.Exhibit AExhibit BExhibit CA customer is trying to set up a VPN with a FortiGate, but they do not have a backup of the configuration.Output during a troubleshooting session is shown in the exhibits A and B and a baseline VPN configuration is shown in Exhibit C Referring to the exhibits, which configuration will restore VPN connectivity?
Question6: Refer to the exhibits, which show a firewall policy configuration and a network topology.An administrator has configured an inbound SSL inspection profile on a FortiGate device (FG-1) that is protecting a data center hosting multiple web pages-Given the scenario shown in the exhibits, which certificate will FortiGate use to handle requests to xyz.com?
Question7: Refer to the exhibit.A customer reports that they are not able to reach subnet 10.10.10.0/24 from their FortiGate device.Based on the exhibit, what should you do to correct the situation?
Question8: Refer to The exhibit showing a FortiEDR configuration.Based on the exhibit, which statement is correct?
Question9: Refer to the exhibit showing a FortiSOAR playbook.You are investigating a suspicious e-mail alert on FortiSOAR, and after reviewing the executed playbook, you can see that it requires intervention.What should be your next step?
Question10: Refer to the exhibit of a FortiNAC configuration.In this scenario, which two statements are correct? (Choose two.)
Question11: Which two methods are supported for importing user defined Lookup Table Data into the FortiSIEM?(Choose two.)
Question12: A customer is planning on moving their secondary data center to a cloud-based laaS. They want to place all the Oracle-based systems Oracle Cloud, while the other systems will be on Microsoft Azure with ExpressRoute service to their main data center.They have about 200 branches with two internet services as their only WAN connections. As a security consultant you are asked to design an architecture using Fortinet products with security, redundancy and performance as a priority.Which two design options are true based on these requirements? (Choose two.)
Question13: An administrator has configured a FortiGate device to authenticate SSL VPN users using digital certificates.A FortiAuthenticator is the certificate authority (CA) and the Online Certificate Status Protocol (OCSP) server.Part of the FortiGate configuration is shown below:Based on this configuration, which two statements are true? (Choose two.)
Question14: Refer to the exhibits.You are configuring a Let's Encrypt certificate to enable SSL protection to your website. When FortiWeb tries to retrieve the certificate, you receive a certificate status failed, as shown below.Based on the Server Policy settings shown in the exhibit, which two configuration changes will resolve this issue? (Choose two.)
Question15: Refer to the exhibit, which shows a FortiGate configuration snippet.A customer in Costa Rica has a FortiGate with SD-WAN configured to use a VPN connection to the United States to browse the internet using a public IP from that country. They would like to enable the SD-WAN rule using a webhook.Which configuration must be added to the FortiGate, and which type of HTTP request must be used to accomplish this? (Choose two.)
Question16: Refer to the exhibits.A customer is trying to restore a VPN connection configured on a FortiGate. Exhibits show output during a troubleshooting session when the VPN was working and the current baseline VPN configuration.Which configuration parameters will restore VPN connectivity based on the diagnostic output?
Question17: Refer to the exhibit.The exhibit shows two error messages from a FortiGate root Security Fabric device when you try to configure a new connection to a FortiClient EMS Server.Referring to the exhibit, which two actions will fix these errors? (Choose two.)
Question18: SD-WAN is configured on a FortiGate. You notice that when one of the internet links has high latency the time to resolve names using DNS from FortiGate is very high.You must ensure that the FortiGate DNS resolution times are as low as possible with the least amount of work.What should you configure?
Question19: Review the following FortiGate-6000 configuration excerpt:Based on the configuration, which statement is correct regarding SNAT source port partitioning behavior?
Question20: Refer to the exhibit, which shows a multi-region SD-WAN architecture.Given this scenario, which two statements are true? (Choose two.)
Question21: Refer to the exhibit.A customer wants FortiClient EMS configured to deploy to 1500 endpoints. The deployment will be integrated with FortiOS and there is an Active Directory server.Given the configuration shown in the exhibit, which two statements about the installation are correct?(Choose two.)
Question22: You are deploying a FortiExtender (FEX) on a FortiGate-60F. The FEX will be managed by the FortiGate.You anticipate high utilization. The requirement is to minimize the overhead on the device for WAN traffic.Which action achieves the requirement in this scenario?
Question23: On a FortiGate Configured in Transparent mode, which configuration option allows you to control Multicast traffic passing through the?
Question24: Refer to the exhibit.A customer has deployed a FortiGate 300E with virtual domains (VDOMs) enabled in the multi-VDOM mode. There are three VDOMs: Root is for management and internet access, while VDOM 1 and VDOM 2 are used for segregating internal traffic. AccountVInk and SalesVInk are standard VDOM links in Ethernet mode.Given the exhibit, which two statements below about VDOM behavior are correct? (Choose two.)
Question25: A Hub FortiGate is connecting multiple branch FortiGate devices separating the traffic centrally in unique VRFs. Routing information is exchanged using BGP between the Hub and the Branch FortiGate devices.You want to efficiently enable route leaking of specific routes between the VRFs.Which two steps are required to achieve this requirement? (Choose two.)
Question26: Refer to the exhibit showing an SD-WAN configuration.According to the exhibit, if an internal user pings 10.1.100.2 and 10.1.100.22 from subnet 172.16.205.0/24, which outgoing interfaces will be used?
Question27: A FortiGate must be configured to accept VoIP traffic which will include session initiation protocol (SIP) traffic. Which statement about the VoIP configuration options is correct?
Question28: Refer to the exhibit.A customer needs to create a multi-tier MCLAG set up with the topology as shown in the exhibit.A1/A2B1/B2C1/C2Which command snippet should be applied to it, to allow active/active links in this topology?
Question29: A customer has FortiAP devices in three branch offices managed from a FortiGate in the HQ. Each FortiAP is connected to a dedicated management VLAN.The customer wants the users connected to the FortiAP SSIDs to use the branch local internet connection, but each branch uses a different VLAN ID for the bridge. HQ users travel to different branches and connect to the same SSID.Which configuration option will solve this requirement?
Question30: Refer to the exhibits.A customer is looking for a solution to authenticate the clients connected to a hardware switch interface of a FortiGate 400E.Referring to the exhibits, which two conditions allow authentication to the client devices before assigning an IP address? (Choose two.)
Question31: You are migrating the branches of a customer to FortiGate devices. They require independent routing tables on the LAN side of the network.After reviewing the design, you notice the firewall will have many BGP sessions as you have two data centers (DC) and two ISPs per DC while each branch is using at least 10 internal segments.Based on this scenario, what would you suggest as the more efficient solution, considering that in the future the number of internal segments, DCs or internet links per DC will increase?
Question32: Refer to the exhibits.A customer wants to deploy 12 FortiAP 431F devices on high density conference center, but they do not currently have any PoE switches to connect them to. They want to be able to run them at full power while having network redundancy From the FortiSwitch models and sample retail prices shown in the exhibit, which build of materials would have the lowest cost, while fulfilling the customer's requirements?
Question33: An administrator has configured a FortiGate device to authenticate SSL VPN users using digital certificates.A FortiAuthenticator is the certificate authority (CA) and the OCSP server.Part of the FortiGate configuration is shown below:Based on this configuration, which authentication scenario will FortiGate deny?
Question34: Refer to the exhibit that shows VPN debugging output.The VPN tunnel between headquarters and the branch office is not being established.What is causing the problem?
Question35: Refer to the exhibits, which show a topology and diagnostic commands.Which two statements about the path resolution are true? (Choose two.)
Question36: Review the Application Control log.Which configuration caused the IPS engine to generate this log?
Question37: Refer to the exhibit showing the history logs from a FortiMail device.Which FortiMail email security feature can an administrator enable to treat these emails as spam?
Question38: You are designing a setup where the FortiGate device is connected to two upstream ISPs using BGP. Part of the requirement is that you must be able to refresh the route advertisements manually without disconnecting the BGP neighborships.Which feature must you enable on the BGP neighbors to accomplish this goal?
Question39: Refer to the exhibit.You are managing a FortiSwitch 3032E that is managed by FortiLink on a FortiGate 3960E. The 3032E is heavily utilized and there is only one port free.The requirement is to add an additional three FortiSwitch 448E devices with 10Gbps SFP+ connectivity directly to the 3032E. The plan is to use split port (phy-mode) with QSFP28 mode to connect the new 448E switches.In this scenario, which statement about the switch deployment is correct?
Question40: A remote worker requests access to an SSH server inside the network. You deployed a ZTNA Rule to their FortiClient. You need to follow the security requirements to inspect this traffic.Which two statements are true regarding the requirements? (Choose two.)
Question41: You have configured a Site-to-Site IPsec VPN tunnel between a FortiGate and a third-party device but notice that one of the error counters on the tunnel interface keeps increasing.Which two configuration options can resolve this problem? (Choose two.)
Question42: You are responsible for recommending an adapter type for NICs on a FortiGate VM that will run on an ESXi Hypervisor. Your recommendation must consider performance as the main concern, cost is not a factor.Which adapter type for the NICs will you recommend?
Question43: Refer to the CLI configuration of an SSL inspection profile from a FortiGate device configured to protect a web server:Based on the information shown, what is the expected behavior when an HTTP/2 request comes in?
Question44: A retail customer with a FortiADC HA cluster load balancing five webservers in L7 Full NAT mode is receiving reports of users not able to access their website during a sale event. But for clients that were able to connect, the website works fine.CPU usage on the FortiADC and the web servers is low, application and database servers are still able to handle more traffic, and the bandwidth utilization is under 30%.Which two options can resolve this situation? (Choose two.)
Question45: A FortiGate is configured to perform outbound firewall authentication with Azure AD as a SAML IdP.What are two valid interactions that occur when the client attempts to access the internet? (Choose two.)
Question46: Refer to the exhibit showing FortiGate configurationsFortiManager VM high availability (HA) is not functioning as expected after being added to an existing deployment.The administrator finds that VRRP HA mode is selected, but primary and secondary roles are greyed out in the GUI The managed devices never show online when FMG-B becomes primary, but they will show online whenever the FMG-A becomes primary.What change will correct HA functionality in this scenario?
Question47: Refer to the exhibits.You must integrate a FortiMail and FortiSandbox Enhanced Cloud solution for a customer who is concerned about the e-mails being delayed for too long.According to the configuration shown in the exhibits, which would be an expected behavior?
Question48: Refer to the exhibits.The exhibits show a diagram of a requested topology and the base IPsec configuration.A customer asks you to configure ADVPN via two internet underlays. The requirement is that you use one interface with a single IP address on DC FortiGate.In this scenario, which feature should be implemented to achieve this requirement?
Question49: A remote IT Team is in the process of deploying a FortiGate in their lab. The closed environment has been configured to support zero-touch provisioning from the FortiManager, on the same network, via DHCP options. After waiting 15 minutes, they are reporting that the FortiGate received an IP address, but the zero- touch process failed.The exhibit below shows what the IT Team provided while troubleshooting this issue:Which statement explains why the FortiGate did not install its configuration from the FortiManager?
Question50: An automation stitch was configured using an incoming webhook as the trigger named'my_incoming_webhook'. The action is configured to execute the CLI Script shown:
