- All Exams Instant Download
Which statement is correct in adding the FTP.Login.Failed signature to the IPS sensor profile?
Refer to the exhibit. Review the Intrusion Prevention System (IPS) profile signature settings. Which statement is correct in adding the FTP.Login.Failed signature to the IPS sensor profile?A . The signature setting uses a custom rating threshold.B . The signature setting includes a group of other signatures.C . Traffic matching the...
Which certificate value can FortiGate use to determine the relationship between the issuer and the certificate?
Which certificate value can FortiGate use to determine the relationship between the issuer and the certificate?A . Subject Key IdentifiervalueB . SMMIE CapabilitiesvalueC . SubjectvalueD . Subject Alternative NamevalueView AnswerAnswer: C
Which two statements are true?
Refer to the exhibit. The Root and To_Internet VDOMs are configured in NAT mode. The DMZ and Local VDOMs are configured in transparent mode. The Root VDOM is the management VDOM. The To_Internet VDOM allows LAN users to access internet. TheTo_lnternet VDOM is the only VDOM with internet access and...
Which the FortiGate handle web proxy traffic rue?
View the exhibit: Which the FortiGate handle web proxy traffic rue? (Choose two.)A . Broadcast traffic received in port1-VLAN10 will not be forwarded to port2-VLAN10.B . port-VLAN1 is the native VLAN for the port1 physical interface.D . port1-VLAN10 and port2-VLAN10 can be assigned to different VDOMs.E . Traffic between port1-VLAN1 and...
Which statement is true about the policy list view?
An administrator has configured outgoing Interface any in a firewall policy. Which statement is true about the policy list view?A . Policy lookup will be disabled.B . By Sequence view will be disabled.C . Search option will be disabledD . Interface Pair view will be disabled.View AnswerAnswer: A
Which three statements about security associations (SA) in IPsec are correct? (Choose three.)
Which three statements about security associations (SA) in IPsec are correct? (Choose three.)A . Phase 2 SAs are used for encrypting and decrypting the data exchanged through the tunnel.B . An SA never expires.C . A phase 1 SA is bidirectional, while a phase 2 SA is directional.D . Phase...
Which of the following statements are true?
Examine this PAC file configuration. Which of the following statements are true? (Choose two.)A . Browsers can be configured to retrieve this PAC file from the FortiGate.B . Any web request to the 172.25.120.0/24 subnet is allowed to bypass the proxy.C . All requests not made to Fortinet.com or the...
How do you format the FortiGate flash disk?
How do you format the FortiGate flash disk?A . Load a debug FortiOS image.B . Load the hardware test (HQIP) image.C . Execute the CLI command execute formatlogdisk.D . Select the format boot device option from the BIOS menu.View AnswerAnswer: D
If the Issuer and Subject values are the same in a digital certificate, which type of entity was the certificate issued to?
If the Issuer and Subject values are the same in a digital certificate, which type of entity was the certificate issued to?A . A CRLB . A personC . A subordinate CAD . A root CAView AnswerAnswer: D
If theServicesfield is configured in a Virtual IP (VIP), which statement is true when central NAT is used?
If theServicesfield is configured in a Virtual IP (VIP), which statement is true when central NAT is used?A . TheServicesfield prevents SNAT and DNAT from being combined in the same policy.B . TheServicesfield is used when you need to bundle several VIPs into VIP groups.C . TheServicesfield removes the requirement...
