The FSSO collector agent set to advanced access mode for the Windows Active Directory uses which convention?

The FSSO collector agent set to advanced access mode for the Windows Active Directory uses which convention?A . LDAPB . WindowsC . RSSOD . NTLMView AnswerAnswer: A

September 6, 2020 No Comments READ MORE +

What can be the reasons for that?

An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)A . The interface has been configured for one-arm sniffer.B . The interface is a member of a virtual wire pair.C . The operation mode is transparent.D ....

August 1, 2020 No Comments READ MORE +

Why does FortiGate keep TCP sessions in the session table for some seconds even after both sides (client and server) have terminated the session?

Why does FortiGate keep TCP sessions in the session table for some seconds even after both sides (client and server) have terminated the session?A . To remove the NAT operation.B . To generate logsC . To finish any inspection operations.D . To allow for out-of-order packets that could arrive after...

July 31, 2020 No Comments READ MORE +

Which of the following statement about the output is true?

Examine the exhibit, which shows the partial output of an IKE real-time debug. Which of the following statement about the output is true?A . The VPN is configured to use pre-shared key authentication.B . Extended authentication (XAuth) was successful.C . Remote is the host name of the remote IPsec peer.D...

July 30, 2020 No Comments READ MORE +

Which of the following SD-WAN load Cbalancing method use interface weight value to distribute traffic? (Choose two.)

Which of the following SD-WAN load Cbalancing method use interface weight value to distribute traffic? (Choose two.)A . Source IPB . SpilloverC . VolumeD . SessionView AnswerAnswer: C D

July 30, 2020 No Comments READ MORE +

Which of the following statement about the output is true?

Examine the exhibit, which shows the partial output of an IKE real-time debug. Which of the following statement about the output is true?A . The VPN is configured to use pre-shared key authentication.B . Extended authentication (XAuth) was successful.C . Remote is the host name of the remote IPsec peer.D...

July 30, 2020 No Comments READ MORE +

Which of the following statements are correct?

View the exhibit. Which of the following statements are correct? (Choose two.)A . This setup requires at least two firewall policies with the action set to IPsec.B . Dead peer detection must be disabled to support this type of IPsec setup.C . The TunnelB route is the primary route for...

July 30, 2020 No Comments READ MORE +

Based on this output, which statements are correct?

View the exhibit. Based on this output, which statements are correct? (Choose two.)A . The all VDOM is not synchronized between the primary and secondary FortiGate devices.B . The root VDOM is not synchronized between the primary and secondary FortiGate devices.C . The global configuration is synchronized between the primary...

July 30, 2020 No Comments READ MORE +

Based on the configuration shown in the exhibit, what statements about application control behavior are true?

View the exhibit. Based on the configuration shown in the exhibit, what statements about application control behavior are true? (Choose two.)A . Access to all unknown applications will be allowed.B . Access to browser-based Social.Media applications will be blocked.C . Access to mobile social media applications will be blocked.D ....

July 29, 2020 No Comments READ MORE +

Which of the following statements are best practices for troubleshooting FSSO? (Choose two.)

Which of the following statements are best practices for troubleshooting FSSO? (Choose two.)A . Include the group of guest users in a policy.B . Extend timeout timers.C . Guarantee at least 34 Kbps bandwidth between FortiGate and domain controllers.D . Ensure all firewalls allow the FSSO required ports.View AnswerAnswer: A...

July 29, 2020 No Comments READ MORE +