FortiEMS Knowledge Check

FortiEMS stands for an:

• 1. Enterprise management Sever and is a security management solution.​

• 1. Endpoint management server and is endpoint management solution.​

• 1. Both A and B​

• 1. None of these.​

For FortiClient Endpoint registration, which port needs to be opened on Firewall

• 1. TCP-8031​

• 1. TCP-8013​

• 1. TCP-10443​

• 1. None of these​

Refer to the following exhibits and answer the questions:

​

​

• 1. The VPN will connection will break at 58%​

• 1. The VPN will connection will break at 10%​

• 1. The VPN will work ​

• 1. None of these​

Which command will you use to check the SSL VPN setting on the firewall​

• 1. Execute SSL VPN settings​

• 1. Get ssl vpn setting​

• 1. Show vpn ssl setings​

• 1. None of these​

For a device to register on the EMS, which of the following is true​

• 1. The system settings should be same as that of the EMS settings​

• 1. The Zero Trust Telemetry Setting on endpoint should be same as the Managed domains settings on the EMS​

• 1. The Zero trust telemetry settings on endpoint should be same as that of the system settings( EMS Settings ) on the EMS.​

• 1. None of these​

A user is facing issue with VPN stopping at 10% of the connection, what is the hierarchy of the steps you will follow to proceed with the solution.​

• 1. Check if ipv6 is disabled > Check the Zero trust telemetry > Check if ipv6 is disabled > Run ssl vpn debugs​

• 1.  Run ssl vpn debugs > Check Remote Access Settings > Check if ipv6 is disabled > Run ssl vpn debugs Check the Zero trust telemetry ​

• 1. Check the Zero trust telemetry > Check Remote Access Settings > Check if ipv6 is disabled > Run ssl vpn debugs​

• 1. None of these​

A user is getting VPN connection error and connection stops at 10%, which of the following is true​

• A) Port reachability ​

• B) Gateway wrong ​

• C) Ipv6 enabled ​

• D) All of these​

A user is connecting to the VPN via wifi, on which adapter are you going to disable the IPv6 as a 2nd step of troubleshooting after you have verified the SSL VPN gateway and Port​

• A) Wifi Adapter​

• B) Physical Adapter ​

• C) VMWare Adapter​

• D) Fortinet SSL VPN Adapter ​

• E) Both A and D​

Upon running the ssl vpn debugs on the firewall, the following error comes up​

"SSL_accept returned 0"​

How would you proceed in such cases

• 1. Check if the machine has TLS1.2 and 1.3 disabled.​

• 1. Check if the machine has TLS 1.1 disabled​

• 1. Check if the machine has TLS 1.2 and TLS 1.3 enabled​

• 1. Not sufficient information.​

If there is an error related to the SSL/TLS mismatch. The VPN connection terminates at​
​

• 1. 51 %​

• 1. 21%​

• 31%

• 1. 40%​

• 1. Both C and D​