- All Exams Instant Download
Which two statements about SSL VPN between two FortiGate devices are true? (Choose two.)
Which two statements about SSL VPN between two FortiGate devices are true? (Choose two.)A . The client FortiGate requires a client certificate signed by the CA on the server FortiGate.B . The client FortiGate requires a manually added route to remote subnets.C . The client FortiGate uses the SSL VPN...
Which two statements are true about the Security Fabric rating? (Choose two.)
Which two statements are true about the Security Fabric rating? (Choose two.)A . The Security Fabric rating is a free service that comes bundled with all FortiGate devices.B . Many of the security issues can be fixed immediately by clicking Apply where available.C . The Security Fabric rating must be...
What must the administrator do to synchronize the address object?
Refer to the exhibits. Exhibit A. Exhibit B. An administrator creates a new address object on the root FortiGate (Local-FortiGate) in the security fabric. After synchronization, this object is not available on the downstream FortiGate (ISFW). What must the administrator do to synchronize the address object? A. Change the csf...
What does the Administrator account need to access the FortiGate global settings?
Refer to the exhibit. The global settings on a FortiGate device must be changed to align with company security policies. What does the Administrator account need to access the FortiGate global settings?A . Enable two-factor authenticationB . Change Administrator profileC . Change passwordD . Enable restrict access to trusted hosts.View...
Which two statements are true?
Refer to the exhibit. The exhibit displays the output of the CLI command: diagnose sys ha dump-by vcluster. The override setting is enable for the FortiGate with SN FGVM010000064692. Which two statements are true? (Choose two.)A . FortiGate SN FGVM010000065036 HA uptime has been reset.B . FortiGate devices are not...
What should the user do to successfully connect to SSL VPN?
Refer to the exhibits. Exhibit A. Exhibit B. The SSL VPN connection fails when a user attempts to connect to it. What should the user do to successfully connect to SSL VPN? A. Change the SSL VPN port on the client. B. Change the Server IP address. C. Change the...
Based on the system performance output, which two statements are correct?
Refer to the exhibits. Exhibit A shows system performance output. Exhibit B shows s FortiGate configured with the default configuration of high memory usage thresholds. Based on the system performance output, which two statements are correct? (Choose two.)A . FortiGate will start sending all files to FortiSandbox for inspection.B ....
Which statement correctly describes NetAPI polling mode for the FSSO collector agent?
Which statement correctly describes NetAPI polling mode for the FSSO collector agent?A . NetAPI polling can increase bandwidth usage in large networks.B . The NetSessionEnum function is used to track user logouts.C . The collector agent must search security event logs.D . The collector agent uses a Windows API to...
Which three pieces of information are included in the sniffer output?
Refer to the exhibit. An administrator is running a sniffer command as shown in the exhibit. Which three pieces of information are included in the sniffer output? (Choose three.)A . Interface nameB . IP headerC . Application headerD . Packet payloadE . Ethernet headerView AnswerAnswer: A,B,D Explanation: Reference: https://kb.fortinet.com/kb/documentLink.do?externalID=11186
What setting on the collector agent is required to achieve this?
An administrator does not want to report the logon events of service accounts to FortiGate. What setting on the collector agent is required to achieve this?A . Add user accounts to the Ignore User List.B . Add the support of NTLM authentication.C . Add user accounts to the FortiGate group...
