- All Exams Instant Download
Why is the site www.bing.com being blocked?
Examine the exhibit, which shows the output of a web filtering real time debug. Why is the site www.bing.com being blocked?A . The web site www.bing.com is categorized by FortiGuard as Malicious Websites.B . The user has not authenticated with the FortiGate yet.C . The web server IP address 204.79.197.200...
Based on the diagnostic outputs above, how is the FortiGate handling the traffic for new sessions that require inspection?
Examine this FortiGate configuration: Examine the output of the following debug command: Based on the diagnostic outputs above, how is the FortiGate handling the traffic for new sessions that require inspection?A . It is allowed, but with no inspectionB . It is allowed and inspected as long as the inspection...
Which is the correct description of a hash result as it relates to digital certificates?
Which is the correct description of a hash result as it relates to digital certificates?A . A unique value used to verify the input dataB . An output value that is used to identify the person or deuce that authored the input data.C . An obfuscation used to mask the...
Which of the following statements are best practices for troubleshooting FSSO? (Choose two.)
Which of the following statements are best practices for troubleshooting FSSO? (Choose two.)A . Include the group of guest users in a policy.B . Extend timeout timers.C . Guarantee at least 34 Kbps bandwidth between FortiGate and domain controllers.D . Ensure all firewalls allow the FSSO required ports.View AnswerAnswer: AD
An administrator wants to create a policy-based IPsec VPN tunnel between two FortiGate devices Winch configuration steps must be performed on both devices to support this scenario? (Choose three.)
An administrator wants to create a policy-based IPsec VPN tunnel between two FortiGate devices Winch configuration steps must be performed on both devices to support this scenario? (Choose three.)A . Define the phase 1 parameters, without enabling IPsec interface modeB . Define the phase 2 parameters.C . Set the phase...
Winch topology should be used to satisfy all of the requirements?
You mc tasked to design a new IPsec deployment with the following criteria: - There are two HQ sues that all satellite offices must connect to - The satellite offices do not need to communicate directly with other satellite offices - No dynamic routing will be used - The design...
Why did the FortiGate drop the packet?
Examine this output from a debug flow: Why did the FortiGate drop the packet?A . The next-hop IP address is unreachable.B . It failed the RPF check.C . It matched an explicitly configured firewall policy with the action DENE . It matched the default implicit firewall policy.View AnswerAnswer: D
How must the administrator configure the local quick mode selector for site B?
An administrator is configuring an IPsec between site A and site B. The Remotes Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192.16.1.0/24 and the remote quick mode selector is 192.16.2.0/24. How must the administrator configure the...
Which of the following statements about backing up logs from the CLI and downloading logs from the GUI are true? (Choose two.)
Which of the following statements about backing up logs from the CLI and downloading logs from the GUI are true? (Choose two.)A . Log downloads from the GUI are limited to the current log filter viewB . Log backups from the CLI cannot be restored to another FortiGate.C . Log...
In a high availability (HA) cluster operating in active-active mode, which of the following correctly describes the path taken by the SYN packet of an HTTP session that is offloaded to a secondary FortiGate?
In a high availability (HA) cluster operating in active-active mode, which of the following correctly describes the path taken by the SYN packet of an HTTP session that is offloaded to a secondary FortiGate?A . Client > primary FortiGate> secondary FortiGate> primary FortiGate> web server.B . Client > secondary FortiGate>...
