- All Exams Instant Download
Which change must an administrator make on FortiGate to route web traffic from internal users to the internet, using ECMP?
Refer to the exhibit, which shows partial outputs from two routing debug commands. Which change must an administrator make on FortiGate to route web traffic from internal users to the internet, using ECMP?A . Set the priority of the static default route using port1 to 10.B . Set the priority...
Which command can be used to sniffer the ESP traffic for the VPN DialUP_0?
Examine the output from the ‘diagnose vpn tunnel list’ command shown in the exhibit; then answer the question below. Which command can be used to sniffer the ESP traffic for the VPN DialUP_0?A . diagnose sniffer packet any ‘port 500’B . diagnose sniffer packet any ‘esp’C . diagnose sniffer packet...
If the priority on route ID 1 were changed from 5 to 20, what would happen to traffic matching that user’s session?
View the following FortiGate configuration. All traffic to the Internet currently egresses from port1. The exhibit shows partial session information for Internet traffic from a user on the internal network: If the priority on route ID 1 were changed from 5 to 20, what would happen to traffic matching that...
Which two statements about the use of digital certificates are true?
Which two statements about the use of digital certificates are true?A . An intermediate CA can sign server certificatesB . An intermediate CA can sign another intermediate CA certificateC . The end entity's certificate can only be created by an intermediate CD . An intermediate CA can validate the end...
Which layer of the FortiOS architecture does an application process or daemon run on?
Which layer of the FortiOS architecture does an application process or daemon run on?A . User spaceB . Configuration layerC . KernelD . HardwareView AnswerAnswer: A
What global configuration setting changes the behavior for content-inspected traffic while FortiGate is in system conserve mode?
What global configuration setting changes the behavior for content-inspected traffic while FortiGate is in system conserve mode?A . av-failopenB . mem-failopenC . utm-failopenD . ips-failopenView AnswerAnswer: A
What action does FortiSwitch take when it receives a loop guard data packet (LGDP) that was sent by itself?
What action does FortiSwitch take when it receives a loop guard data packet (LGDP) that was sent by itself?A . The receiving port is shut downB . The sending port is shut downC . The receiving port is moved to the STP blocking stateD . The sending port is moved...
Which of the following statements about this debug output are true?
View the exhibit, which of the contains the partial output of an IKE real-time debug, then answer the question below. Which of the following statements about this debug output are true? (Choose two.)A . The name of the tunnel being negotiated is VPN.B . Both phases 1 and 2 are...
Which statements are correct regarding the output?
View the exhibit, which contains the output of get sys ha status, and then answer the question below. Which statements are correct regarding the output? (Choose two.)A . The slave configuration is not synchronized with the master.B . The HA management IP is 169.254.0.2.C . Master is selected because it...
What are two impacts on applications if adjusting the TCP Maximum Segment Size (MSS) on FortiGate? (Choose two.)
What are two impacts on applications if adjusting the TCP Maximum Segment Size (MSS) on FortiGate? (Choose two.)A . The MSS configuration is prone to errors since it requires a thorough understanding of the network path.B . The packet count increases adding unnecessary TCP headers when the MSS value is...
