- All Exams Instant Download
Which statement about the trace evaluation by FortiGate is true?
Refer to the exhibit. Which statement about the trace evaluation by FortiGate is true?A . Packets exceeding the configured maximum concurrent connection limit are denied by the per-IP shaper. B. The packet exceeded the configured bandwidth and was dropped based on the priority configuration. C. The packet exceeded the configured...
Which conclusion about the packet debug flow output is correct?
Refer to the exhibit. Which conclusion about the packet debug flow output is correct?A . The number of concurrent sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the traffic shaper, and the packet was dropped. B. The number of concurrent sessions for 10.1.10.1 exceeded the maximum...
Which two statements about how the configured SD-WAN rules are processing traffic are true?
Refer to exhibits. Exhibit A shows the SD-WAN rules and exhibit B shows the traffic logs. The SD-WAN traffic logs reflect how FortiGate processed traffic. Which two statements about how the configured SD-WAN rules are processing traffic are true? (Choose two.)A . The implicit rule overrides all other rules because...
What is the purpose of a predefined template on the FortiAnalyzer?
What is the purpose of a predefined template on the FortiAnalyzer?A . It can be edited and modified as required B. It specifies the report layout which contains predefined texts, charts, and macros C. It specifies report settings which contains time period, device selection, and schedule D. It contains predefined...
Which three performance SLA protocols are available on the FortiGate CLI only? (Choose three.)
Which three performance SLA protocols are available on the FortiGate CLI only? (Choose three.)A . tcp-echo B. icmp C. twamp D. udp-echo E. smtpView AnswerAnswer: A,C,D Explanation: Command output from a fortigate: FW-01 (test-health-check) # set protocol ping Use PING to test the link with the server. tcp-echo Use TCP...
To correct this traffic shaping issue on FortiGate, what configuration change must be made on which policy?
Refer to exhibits. Exhibit A. Exhibit B. Exhibit A shows the traffic shaping policy and exhibit B show: the firewall policy FortiGate is not performing traffic shaping as expected basi on the policies shown in the exhibits. To correct this traffic shaping issue on FortiGate, what configuration change must be...
What are the two minimum configuration requirements for an outgoing interface to be selected once the SD-WAN logical interface is enabled? (Choose two)
What are the two minimum configuration requirements for an outgoing interface to be selected once the SD-WAN logical interface is enabled? (Choose two)A . Specify outgoing interface routing cost. B. Configure SD-WAN rules interface preference. C. Select SD-WAN balancing strategy. D. Specify incoming interfaces in SD-WAN rules.View AnswerAnswer: B,C
Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?
Refer to the exhibit. Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?A . The type of traffic defined and allowed on firewall policy ID 1 is UDP. B. FortiGate has terminated the session after a change on policy ID 1. C. Changes have been made on...
Based on the exhibits, which statement is correct?
Refer to exhibits. Exhibit A. . Exhibit A, which shows the SD-WAN performance SLA and exhibit B shows the health of the participating SD-WAN members. Based on the exhibits, which statement is correct? A. The dead member interface stays unavailable until an administrator manually brings the interface back. B. The...
Which CLI command do you use to perform real-time troubleshooting for ADVPN on either a hub or a spoke FortiGate?
Which CLI command do you use to perform real-time troubleshooting for ADVPN on either a hub or a spoke FortiGate?A . diagnose sys virtual-wan-link service B. get router info routing-table C. diagnose debug application ike D. get ipsec tunnel listView AnswerAnswer: C
