vota tu gaaaa

which two features of IPsec IKEv1 authentication are supported by fortigate ? two option. 57

• no certificate is required on the remote peer when you set the certificate asignature as the authentication

• extended authentication (XAuth) to request the remote peer to provide a username and password

• pre-shared key and certificate signature as authentication methods

• extended authentication (XAuth) for faster authentication because fewer packets are exchanged

what is a reason for triggering IPS fail open? 56

• the IPS engine is upgraded

• the IPS engine cannot decode a packet

• The IPS socket buffer is full and the IPS engine cannot process additional packets.

• the administrator enabled Nturbo acceleration.

which statement is correct regarding the security fabric? 55

• fortimanager is one of the required member devices

• fortigate devices must be operating in NAT mode

• fortigate cloud cannot be used for logging purposes

• a minimun of two fortinet devices is required

what are two benefits of flow-based inspection compared to proxy-based inspection? two choose. 54

• fortigate allocates two sessions per connection

• fortigate performs a more exhaustive inspection on traffic

• fortigate uses fewer resources

• fortigate adds less latency to traffic

an organization requires remote users to send external application date running on their pcs and access FTP resources through an SSL/TLS connection which fortigate configuration can archieve this goal? 53

• SSL VPN bookmark

• SSL VPN quick connection

• Zero trust network access

• SSL VPN tunnel

a network administrator has enabled full ssl inspection and web filtering on fortigate. when visiting any HTTPS websites, the browser reports certificate warning errors. when visiting HTTP websites, the browser does not report errors. what is the reason for the certificate warning errors? 52

• the full SSL inspection feature does not have a valid license

• the matching firewall policy is set to proxy inspection mode

• the browser does not trust the certificate used by fortigate for SSL inspection

• the certificate used by fortigate for SSL inspection does not contain the required certificate extensions.

whitch statement about the deployment of the security fabric in a multi-VDOM environment is true?. 51

• VDOMs without ports with connected devices are not displayed in the topology

• each VDOM in the environment can be part of a different security fabric

• security rating reports can be ru individuality for each configured VDOM

• downstream devices can connect to the upstream device from any of their VDOMs

an administrator configures fortiguard servers as DNS servers on fortigate using default settings. what is true about the DNS connection to a fortiguard server ? 50

• it uses DNS over TLS

• it uses DNS over HTTPS

• it uses UDP 8888

• it uses UDP 53

an administrator want to simplify remote without asking to provide user credentials. which access control method provides this solution? 49

• L2TP

• ZTNA IP/MAO filtering mode

• ZTNA access proxy

• SSL VPN

what are two functions of the ZTNA rule? two options. 48

• it redirects the client request to the access proxy

• it apples security profiles to protect traffic

• it defines the access proxy

• it enforces access control