- All Exams Instant Download
Which statement is correct in adding the FTP.Login.Failed signature to the IPS sensor profile?
Refer to the exhibit. Review the Intrusion Prevention System (IPS) profile signature settings. Which statement is correct in adding the FTP.Login.Failed signature to the IPS sensor profile?A . The signature setting uses a custom rating threshold.B . The signature setting includes a group of other signatures.C . Traffic matching the...
If theServicesfield is configured in a Virtual IP (VIP), which statement is true when central NAT is used?
If theServicesfield is configured in a Virtual IP (VIP), which statement is true when central NAT is used?A . TheServicesfield prevents SNAT and DNAT from being combined in the same policy.B . TheServicesfield is used when you need to bundle several VIPs into VIP groups.C . TheServicesfield removes the requirement...
Which three options are the remote log storage options you can configure on FortiGate? (Choose three.)
Which three options are the remote log storage options you can configure on FortiGate? (Choose three.)A . FortiCacheB . FortiSIEMC . FortiAnalyzerD . FortiSandboxE . FortiCloudView AnswerAnswer: B,C,D
Which statements best describe auto discovery VPN (ADVPN). (Choose two.)
Which statements best describe auto discovery VPN (ADVPN). (Choose two.)A . It requires the use of dynamic routing protocols so that spokes can learn the routes to other spokes.B . ADVPN is only supported with IKEv2.C . Tunnels are negotiated dynamically between spokes.D . Every spoke requires a static tunnel...
Which statement is correct if a user is unable to receive a block replacement message when downloading an infected file for the first time?
Refer to the exhibits to view the firewall policy (Exhibit A) and the antivirus profile (Exhibit B). Which statement is correct if a user is unable to receive a block replacement message when downloading an infected file for the first time?A . The firewall policy performs the full content inspection...
Which statement is true about the policy list view?
An administrator has configured outgoing Interface any in a firewall policy. Which statement is true about the policy list view?A . Policy lookup will be disabled.B . By Sequence view will be disabled.C . Search option will be disabledD . Interface Pair view will be disabled.View AnswerAnswer: A
Given the security fabric topology shown in the exhibit, which two statements are true?
Refer to the exhibit. Given the security fabric topology shown in the exhibit, which two statements are true? (Choose two.)A . This security fabric topology is a logical topology view.B . There are 19 security recommendations for the security fabric.C . There are five devices that are part of the...
What types of traffic and attacks can be blocked by a web application firewall (WAF) profile? (Choose three.)
What types of traffic and attacks can be blocked by a web application firewall (WAF) profile? (Choose three.)A . Traffic to botnetserversB . Traffic to inappropriate web sitesC . Server information disclosure attacksD . Credit card data leaksE . SQL injection attacksView AnswerAnswer: A,C,E
How must the administrator configure the local quick mode selector for site B?
An administrator is configuring an Ipsec between site A and siteB. The Remotes Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192.16.1.0/24 and the remote quick mode selector is 192.16.2.0/24. How must the administrator configure the local...
Based on the system performance output, which two statements are correct?
Refer to the exhibits. Exhibit A shows system performance output. Exhibit B shows a FortiGate configured with the default configuration of high memory usage thresholds. Based on the system performance output, which two statements are correct? (Choose two.)A . Administrators can access FortiGate only through the console port.B . FortiGate...
