- All Exams Instant Download
Given the security fabric topology shown in the exhibit, which two statements are true?
Refer to the exhibit. Given the security fabric topology shown in the exhibit, which two statements are true? (Choose two.)A . There are five devices that are part of the security fabric.B . Device detection is disabled on all FortiGate devices.C . This security fabric topology is a logical topology...
Which part of the policy configuration must you change to resolve the issue?
Refer to the exhibits. Exhibit A. Exhibit B. The exhibits show the SSL and authentication policy (Exhibit A) and the security policy (Exhibit B) tor Facebook. Users are given access to the Facebook web application. They can play video content hosted on Facebook but they are unable to leave reactions...
Which statement is correct If option 5 was used with the IPS diagnostic command and the outcome was a decrease in the CPU usage?
Refer to the exhibit. Examine the intrusion prevention system (IPS) diagnostic command. Which statement is correct If option 5 was used with the IPS diagnostic command and the outcome was a decrease in the CPU usage?A . The IPS engine was inspecting high volume of traffic.B . The IPS engine...
Given the routing database shown in the exhibit, which two statements are correct?
Refer to the exhibit. Given the routing database shown in the exhibit, which two statements are correct? (Choose two.)A . The port3 default route has the highest distance.B . The port3 default route has the lowest metric.C . There will be eight routes active in the routing table.D . The...
What should the user do to successfully connect to SSL VPN?
Refer to the exhibits. Exhibit A. Exhibit B. The SSL VPN connection fails when a user attempts to connect to it. What should the user do to successfully connect to SSL VPN? A. Change the SSL VPN port on the client. B. Change the Server IP address. C. Change the...
Which two inspection modes can you use to configure a firewall policy on a profile-based next-generation firewall (NGFW)? (Choose two.)
Which two inspection modes can you use to configure a firewall policy on a profile-based next-generation firewall (NGFW)? (Choose two.)A . Proxy-based inspectionB . Certificate inspectionC . Flow-based inspectionD . Full Content inspectionView AnswerAnswer: A,C
If traffic matches this IPS sensor, which two actions is the sensor expected to take?
Refer to the exhibit. The exhibit shows the IPS sensor configuration. If traffic matches this IPS sensor, which two actions is the sensor expected to take? (Choose two.)A . The sensor will allow attackers matching the NTB . Spoofed.KoC . DoS signature.D . The sensor will block all attacks aimed...
Which three pieces of information are included in the sniffer output?
Refer to the exhibit. An administrator is running a sniffer command as shown in the exhibit. Which three pieces of information are included in the sniffer output? (Choose three.)A . Interface nameB . Ethernet headerC . IP headerD . Application headerE . Packet payloadView AnswerAnswer: A,C,E Explanation: Reference: https://kb.fortinet.com/kb/documentLink.do?externalID=11186
Which CLI command allows administrators to troubleshoot Layer 2 issues, such as an IP address conflict?
Which CLI command allows administrators to troubleshoot Layer 2 issues, such as an IP address conflict?A . get system statusB . get system performance statusC . diagnose sys topD . get system arpView AnswerAnswer: D Explanation: "If you suspect that there is an IP address conflict, or that an IP...
Why is FortiGate not sending probes to 4.2.2.2 and 4.2.2.1 servers?
Refer to the exhibit. An administrator has configured a performance SLA on FortiGate, which failed to generate any traffic. Why is FortiGate not sending probes to 4.2.2.2 and 4.2.2.1 servers? (Choose two.)A . The Detection Mode setting is not set to Passive.B . Administrator didn't configure a gateway for the...
