- All Exams Instant Download
What is the destination MAC address or addresses when packets are forwarded from the primary FortiGate to the secondary FortiGate?
Exhibit. Refer to the exhibit, which contains an active-active toad balancing scenario. During the traffic flow the primary FortiGate forwards the SYN packet to the secondary FortiGate. What is the destination MAC address or addresses when packets are forwarded from the primary FortiGate to the secondary FortiGate?A . Secondary physical...
What can you cone udo from this configuration about access to www.facebook, com, which is categorized as Social Networking?
Exhibit. Refer to the exhibit, which shows a partial web filter profile conjuration What can you cone udo from this configuration about access to www.facebook, com, which is categorized as Social Networking?A . The access is blocked based on the Content Filter configurationB . The access is allowed based on...
In which two ways does fortiManager function when it is deployed as a local FDS? (Choose two)
In which two ways does fortiManager function when it is deployed as a local FDS? (Choose two)A . lt can be configured as an update server a rating server or bothB . It provides VM license validation servicesC . It supports rating requests from non-FortiGate devices.D . It caches available...
Which two parameters must you configure on the corresponding single hub?
Exhibit. Refer to the exhibit, which contains the partial ADVPN configuration of a spoke. Which two parameters must you configure on the corresponding single hub? (Choose two.)A . Set auto-discovery-sender enableB . Set ike-version 2C . Set auto-discovery-forwarder enableD . Set auto-discovery-receiver enableView AnswerAnswer: A, B Explanation: On the hub...
What two concisions can you draw from the corresponding FortiGate configuration?
Exhibit. Refer to the exhibit, which shows a partial touting table What two concisions can you draw from the corresponding FortiGate configuration? (Choose two.)A . IPSec Tunnel aggregation is configuredB . net-device is enabled in the tunnel IPSec phase 1 configurationC . OSPI is configured to run over IPSec.D ....
What can the administrator do to fix this problem?
An administrator has configured two fortiGate devices for an HA cluster. While testing HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary device What can the administrator do to fix this problem?A . Verify that the speed and...
Which configuration can be used to reduce the number of BGP sessions in on IBGP network?
Which configuration can be used to reduce the number of BGP sessions in on IBGP network?A . Route-reflector-peer enableB . Route-reflector-client enableC . Route-reflector enableD . Route-reflector-server enableView AnswerAnswer: B Explanation: To reduce the number of BGP sessions in an IBGP network, you can use a route reflector, which acts...
What two conclusions can you draw from this command output?
Exhibit. Refer to the exhibit, which shows information about an OSPF interlace What two conclusions can you draw from this command output? (Choose two.)A . The port3 network has more man one OSPF routerB . The OSPF routers are in the area ID of 0.0.0.1.C . The interfaces of the...
What two options can you configure in OSPF to block the advertisement of the 10.1.10.0 prefix?
Refer to the exhibit, which shows a routing table. What two options can you configure in OSPF to block the advertisement of the 10.1.10.0 prefix? (Choose two.)A . Remove the 16.1.10.C prefix from the OSPF networkB . Configure a distribute-list-outC . Configure a route-map outD . Disable Redistribute ConnectedView AnswerAnswer:...
Which ADVPN configuration must be configured using a script on fortiManager, when using VPN Manager to manage fortiGate VPN tunnels?
Which ADVPN configuration must be configured using a script on fortiManager, when using VPN Manager to manage fortiGate VPN tunnels?A . Enable AD-VPN in IPsec phase 1B . Disable add-route on hubC . Configure IP addresses on IPsec virtual interlacesD . Set protected network to allView AnswerAnswer: A Explanation: To...
