- All Exams Instant Download
Which statements are true regarding the Weight value?
View the exhibit, which contains the output of a diagnose command, and the answer the question below. Which statements are true regarding the Weight value?A . Its initial value is calculated based on the round trip delay (RTT). B. Its initial value is statically set to 10. C. Its value...
Which of the following statements is true regarding this configuration?
View the global IPS configuration, and then answer the question below. Which of the following statements is true regarding this configuration?A . IPS will scan every byte in every session. B. FortiGate will spawn IPS engine instances based on the system load. C. New packets will be passed through without...
In which two states is a given session categorized as ephemeral? (Choose two.)
In which two states is a given session categorized as ephemeral? (Choose two.)A . A TCP session waiting to complete the three-way handshake. B. A TCP session waiting for FIN ACK. C. A UDP session with packets sent and received. D. A UDP session with only one packet received.View AnswerAnswer:...
Which two configuration settings change the behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.)
Which two configuration settings change the behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.)A . IPS failopen B. mem failopen C. AV failopen D. UTM failopenView AnswerAnswer: A,C
Which statements are true regarding the output in the exhibit?
View the exhibit, which contains the output of a diagnose command, and then answer the question below. Which statements are true regarding the output in the exhibit? (Choose two.)A . FortiGate will probe 121.111.236.179 every fifteen minutes for a response. B. Servers with the D flag are considered to be...
Which two statements about this debug output are correct?
Refer to the exhibit, which contains partial output from an IKE real-time debug. Which two statements about this debug output are correct? (Choose two.)A . The remote gateway IP address is 10.0.0.1. B. The initiator provided remote as its IPsec peer ID. C. It shows a phase 1 negotiation. D....
Which statement about the designated router (DR) and backup designated router (BDR) in an OSPF multi-access network is true?
Which statement about the designated router (DR) and backup designated router (BDR) in an OSPF multi-access network is true?A . FortiGate first checks the OSPF ID to elect a DR. B. Non-DR and non-BDR routers will form full adjacencies to DR and BDR only. C. BDR is responsible for forwarding...
Which statement about this setting is true?
An administrator has configured two FortiGate devices for an HA cluster. While testing HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary device. The administrator decides to enable the setting link-failed-signal to fix the problem. Which statement about...
Which action will FortiGate take if a user attempts to access www.dropbox.com, which is categorized as File Sharing and Storage?
View the exhibit, which contains a partial web filter profile configuration, and then answer the question below. Which action will FortiGate take if a user attempts to access www.dropbox.com, which is categorized as File Sharing and Storage?A . FortiGate will exempt the connection based on the Web Content Filter configuration....
What HA setting must be changed in one of the HA clusters to fix the problem?
Two independent FortiGate HA clusters are connected to the same broadcast domain. The administrator has reported that both clusters are using the same HA virtual MAC address. This creates a duplicated MAC address problem in the network . What HA setting must be changed in one of the HA clusters...
