In a FSSO agentless polling mode solution, where must the collector agent be?

The FortiGate device polls the AD domain controllers

In any of the AD domain controller

In the master AD domain controller

Which of the following IPsec configuration modes can be used when the FortiGate is running in NAT mode?

Both policy-based and route-based VPN.

IPSec VPNs are not supported when the FortiGate is running in NAT mode.

Which of the following statements are correct differences between NAT/route and transparent mode? (Choose two.)

In transparent mode, interfaces do not have IP addresses

Static routers are only used in NAT/route mode.

Firewall polices are only used in NAT/ route mode.

. Only transparent mode permits inline traffic inspection at layer 2.

What methods can be used to access the FortiGate CLI? (Choose two.)

A direct connection to the serial console port.

Using the CLI console widget in the GUI.

Of the following information, what can be recorded by a Data Leak Prevention sensor configured to do a summary archiving? (Choose three.)

Sender email address (for the case of SMTP traffic)

Recipient email address (for the case of SMTP traffic)

Attached file (for the case of SMTP traffic)

Visited URL (for the case of HTTP traffic)

Email body (for the case of SMTP traffic)

NEW QUESTION 138 Which of the following statements are correct regarding logging to memory on a FortiGate unit?

When the system has reached its capacity for log messages, the FortiGate unit overwrites the oldest messages.

If the FortiGate unit is reset or loses power, log entries captured to memory will be lost.

When the system has reached its capacity for log messages, the FortiGate unit will stop logging to memory.

Which statement is one disadvantage of using FSSO NetAPI polling mode over FSSO Security Event Log (WinSecLog) polling mode?

It might miss some logon events.

It requires a DC agent installed in some of the Windows DC.

It requires access to a DNS server for workstation name resolution.

Which of the following statements are correct about NTLM authentication? (Choose three)

NTLM negotiation starts between the FortiGate device and the user's browser.

It must be supported by the user's browser.

It must be supported by the domain controllers

. It does not require a collector agent.

Which of the following correctly describes the cause for the dropped packets?

The reserve path forwarding check

The subnet 172.20.169.0/24 is NOT in the Ottawa FortiGate's routing table.

The destination workstation 172.20.169.2 does NOT have the subnet 172.20.168.0/24 in its routing table.

Bob wants to send Alice a file that is encrypted using public key cryptography. Which of the following statements is correct regarding the use of public key cryptography in this scenario?

. Bob will use Alice’s public key to encrypt the file and Alice will use her private key to decrypt the file.

Bob will use his private key to encrypt the file and Alice will use her private key to decrypt the file.

Bob will use his public key to encrypt the file and Alice will use Bob’s private key to decrypt the file.

. Bob will use his public key to encrypt the file and Alice will use her private key to decrypt the file.

What is the default criteria for selecting the HA master unit in a HA cluster?

Port monitor, uptime, priority, serial number

. port monitor, priority, uptime, serial number

Priority, uptime, port monitor, serial number

uptime, priority, port monitor, serial number

Which statements are true regarding IPv6 anycast addresses? (Choose two.)

Multiple interfaces can share the same anycast address.

An anycast packet is routed to the nearest interface.

They are allocated from the multicast address space

Different nodes cannot share the same anycast address.

What are two requirements for DC-agent mode FSSO to work properly in a Windows AD environment? (Choose two.)

DNS server must properly resolve all workstation names

The remote registry service must be running in all workstations

The collector agent must be installed in one of the Windows domain controllers

A same user cannot be logged in into two different workstations at the same time

A FortiGate is configured with three virtual domains (VDOMs). Which of the following statements is correct regarding multiple VDOMs

The FortiGate supports any combination of VDOMs in NAT/Route and transparent modes.

The FortiGate must be a model 1000 or above to support multiple VDOMs

A license has to be purchased and applied to the FortiGate before VDOM mode could be enabled.

Changing the operational mode of a VDOM requires a reboot of the FortiGate

Which antivirus and attack definition update options are supported by FortiGate units? (Choose two.

Manual update by downloading the signatures from the support site.

Push updates from a FortiAnalyzer

execute fortiguard-AV-AS command from the CLI

Caching improves performance by reducing FortiGate unit requests to the FortiGuard server. Which of the following statements are correct regarding the caching of FortiGuard responses

The cache uses a small portion of the FortiGate system memory

When the cache is full, the least recently used IP address or URL is deleted from the cache

An administrator can configure the number of seconds to store information in the cache before the FortiGate unit contacts the FortiGuard server again

Caching is available for web filtering, antispam, and IPS requests.

The size of the cache will increase to accommodate any number of cached queries.

Which of the following statements are true about Man-in-the-middle SSL Content Inspection? (Choose three.)

The FortiGate device acts as a sub-CA

The local service certificate of the web server must be installed in the FortiGate device

The required SSL Proxy certificate must first be requested to a public certificate authority (CA).

The FortiGate device “re-signs” all the certificates coming from the HTTPS servers

The FortiGate device does man-in-the-middle inspection.

What is the correct behavior when the email attachment is detected as a virus by the FortiGate antivirus engine?

The FortiGate unit will reject the infected email and the sender will receive a failed delivery message.

The FortiGate unit will remove the infected file and deliver the email with a replacement message to alert the recipient that the original attachment was infected.

The FortiGate unit will remove the infected file and add a replacement messag

. Both sender and recipient are notified that the infected file has been removed.

The FortiGate unit will reject the infected email and notify the sender.

In the debug command output shown in the exhibit, which of the following best described the MAC address 00:09:0f:69:03:7e ?

It is the MAC address of another network devices located in the same LAN segment as the FortiGate unit's port1 interface

. It is one of the secondary MAC addresses of the port1 interface.

It is the primary MAC address of the port interface.

It is the HA virtual MAC address

Which of the following statements correctly describes the static routing configuration provided above?

The FortiGate sends all the traffic to 172.20.168.0/24 through port1

The FortiGate evenly shares the traffic to 172.20.168.0/24 through both routes.

The FortiGate shares the traffic to 172.20.168.0/24 through both routes, but the port2 route will carry approximately twice as much of the traffic

Only the route that is using port1 will show up in the routing table.

A FortiGate unit operating in NAT/route mode and configured with two sub-interface on the same physical interface. Which of the following statement is correct regarding the VLAN IDs in this scenario?

The two VLAN sub-interfaces must have different VLAN IDs.

The two VLAN sub-interfaces can have the same VLAN IDs only if they have IP addresses in different subnets.

The two VLAN sub-interfaces can have VLAN ID only if they belong to different VDOMs

The two VLAN sub-interfaces can have the same VLAN if they are connected to different L2 IEEE 802.1Q complaint switches.

How is traffic routed onto an SSL VPN tunnel from the FortiGate unit side?

Assignment of an IP address to the client causes a host route to be added to the FortiGate unit's kernel routing table.

A static route must be configured by the administrator using the ssl.root interface as the outgoing interface

A route back to the SSLVPN IP pool is automatically created on the FortiGate unit.

The FortiGate unit adds a route based upon the destination address in the SSL VPN firewall policy.

Which of the following settings can be configured per VDOM? (Choose three)

Operating mode (NAT/route or transparent)

The workstation, 172.16.1.1/24, connects to port2 of the FortiGate device, and the ISP router, 172.16.1.2, connects to port1. Without changing IP addressing, which configuration changes are required to properly forward users traffic to the Internet? (Choose two)

At least one firewall policy from port2 to port1 to allow outgoing traffic

The FortiGate devices configured in transparent mode.

A default route configured in the FortiGuard devices pointing to the ISP's router.

Static or dynamic IP addresses in both ForitGate interfaces port1 and port2.

Which is NOT true about source matching with firewall policies?

. A source user/group and device must be specified in the firewall policy.

. A source address object must be selected in the firewall policy.

A source user/group may be selected in the firewall policy

A source device may be defined in the firewall policy.

A source interface must be selected in the firewall policy

Which statements are correct for port pairing and forwarding domains? (Choose two.)

They both create separate broadcast domains

They may contain physical and/or virtual interfaces.

Port Pairing works only for physical interfaces

Forwarding Domain only applies to virtual interfaces

Which statements are correct regarding virtual domains (VDOMs)? (Choose two)

A management VDOM handles SNMP, logging, alert email and FDN-based updates.

VDOMs share firmware versions, as well as antivirus and IPS databases.

VDOMs divide a single FortiGate unit into two or more virtual units that each have dedicated memory and CPUs.

Different time zones can be configured in each VDOM

Which action does the FortiGate take when link health monitor times out?

. All routes using the next-hop gateway configured in the link health monitor are removed from the routing table.

All routes to the destination subnet configured in the link health monitor are removed from the routing table

The distance values of all routes using interface configured in the link health monitor are increased.

The priority values of all routes using configured in the link health monitor are increased.

The FortiGate port1 is connected to the Internet. The FortiGate port2 is connected to the internal network. Examine the firewall configuration shown in the exhibit; then answer the question below. Based on the firewall configuration illustrated in the exhibit, which statement is correct?

DNS Internet access is always allowed, even for users that have not authenticated.

A user that has not authenticated can access the Internet using any protocol that does not trigger an authentication challenge.

A user that has not authenticated can access the Internet using any protocol except HTTP, HTTPS, Telnet, and FTP.

A user must authenticate using the HTTP, HTTPS, SSH, FTP, or Telnet protocol before they can access all Internet services.

Which of the following statements is true regarding a FortiGate device operating in transparent mode? (Choose three.)

It forwards frames using the destination MAC address.

it can perform content inspection (antivirus, web filtering, etc)

It forwards packets using the destination IP address

Which is true about incoming and outgoing interfaces in firewall policies?

Source and destination interfaces are mandatory

A physical interface may not be used.

Multiple interfaces may not be used for both incoming and outgoing.

Given the information provided in the exhibits, which of the following statements are correct? (Choose two.)

STUDENT is likely to be the master device.

There is not enough information to determine the cluster mode.

Session-pickup is likely to be enabled.

. The cluster mode is active-passive.

For data leak prevention, which statement describes the difference between the block and quarantine actions?

A block action prevents the transactio

A quarantine action blocks all future transactions, regardless of the protocol.

A quarantine action archives the data.

A block action has a finite duratio

A quarantine action must be removed by an administrator.

You are creating a custom signature. Which has incorrect syntax?

. F-SBID(--attack_id 1842,--name "Ping.Death";--protocol icmp; --data_size>32000;)

F-SBID(--name "Block.SMTP.VRFY.CMD";--pattern "vrfy";-- service SMTP; --no_case;-- context header;)

F-SBID(--name "Ping.Death";--protocol icmp;--data_size>32000;)

F-SBID(--name "Block".HTTP.POST"; --protocol tcp;-- service HTTP;-- flow from_client;--pattern "POST"; -- context uri;--within 5,context;)

What is not true of configuring disclaimers on the FortiGate?

Disclaimers can be bypassed through security exemption lists.

Disclaimers can be used in conjunction with captive portal.

Disclaimers appear before users authenticate.

Disclaimers must be accepted in order to continue to the authentication login or originally intended destination.

Formulir tanpa judul

Authored by Wisnu saputro

others

Used 1+ times

AI Actions

Add similar questions

Adjust reading levels

Convert to real-world scenario

Translate activity

More...

Content View

Student View

106 questions

Show all answers

MULTIPLE CHOICE QUESTION

30 sec • 10 pts

1. Review the IPsec phase 1 configuration in the exhibit; then answer the question below.

The remote gateway address is 10.200.3.1

The local IPsec interface address is 10.200.3.1

The local gateway IP is the address assigned to port1

The local gateway IP is 10.200.3.1

MULTIPLE CHOICE QUESTION

30 sec • 10 pts

Which of the following items is NOT a packet characteristic matched by a firewall service object?

ICMP type and code

TCP/UDP source and destination ports

IP protocol number

TCP sequence number

MULTIPLE CHOICE QUESTION

30 sec • 10 pts

Which web filtering inspection mode inspects DNS traffic?

DNS-based.

FQDN-based.

Flow-based.

URL-based.

MULTIPLE CHOICE QUESTION

30 sec • 10 pts

You have created a new administrator account, and assign it the prof_admin profile. Which is false about that account's permissions?

It cannot upgrade or downgrade firmware.

t can create and assign administrator accounts to parts of its own VDOM.

It can reset forgotten passwords for other administrator accounts such as "admin"

It has a smaller permissions scope than accounts with the "super_admin" profile.

MULTIPLE CHOICE QUESTION

30 sec • 10 pts

2. Which of the following statements is correct regarding FortiGate interfaces and spanning tree protocol? (Choose Two)

Only FortiGate switch interfaces Participate in spanning tree.

All FortiGate interfaces in transparent mode VDOMs participate in spanning tree.

All FortiGate interfaces in NAT/route mode VDOMs Participate in spanning tree.

All FortiGate interfaces in transparent mode VDOMs may block or forward BPDUs.

MULTIPLE SELECT QUESTION

30 sec • 10 pts

Which statements are correct properties of a partial mesh VPN deployment. (Choose two.)

VPN tunnels interconnect between every single location.

VPN tunnels are not configured between every single location.

Some location may be reachable via a hub location.

There are no hub locations in a partial mesh.

MULTIPLE CHOICE QUESTION

30 sec • 10 pts

Which statement best describes what SSL.root is?

The name of the virtual network adapter required in each user's PC for SSL VPN Tunnel mode.

The name of a virtual interface in the root VDOM where all the SSL VPN user traffic comes from.

A Firewall Address object that contains the IP addresses assigned to SSL VPN users.

The virtual interface in the root VDOM that the remote SSL VPN tunnels connect to.

Access all questions and much more by creating a free account

Create resources

Host any resource

Get auto-graded reports

Continue with Google

Continue with Email

Continue with Classlink

Continue with Clever

or continue with

Microsoft

Apple

Others

Already have an account?

Similar Resources on Wayground

111 questions

Tin 11 gk1(tổng ôn)

Quiz

•

KG - University

102 questions

Untitled form

Quiz

•

KG - University

106 questions

ИКТ 2 руб

Quiz

•

KG - University

104 questions

Latihan hiragana 1

Quiz

•

KG - University

101 questions

LO4P0LHZY4L4SUZP

Quiz

•

KG - University

108 questions

Semester Test Review 1

Quiz

•

KG - University

105 questions

Semester 2 Vocabulary Review - 7th

Quiz

•

KG - University

105 questions

2024 Integrated Science - Final Exam B

Quiz

•

KG - University

Popular Resources on Wayground

8 questions

Spartan Way - Classroom Responsible

Quiz

•

9th - 12th Grade

15 questions

Fractions on a Number Line

Quiz

•

3rd Grade

14 questions

Boundaries & Healthy Relationships

Lesson

•

6th - 8th Grade

20 questions

Equivalent Fractions

Quiz

•

3rd Grade

3 questions

Integrity and Your Health

Lesson

•

6th - 8th Grade

25 questions

Multiplication Facts

Quiz

•

5th Grade

9 questions

FOREST Perception

Lesson

•

20 questions

Main Idea and Details

Quiz

•

5th Grade

Discover more resources for others

8 questions

Spartan Way - Classroom Responsible

Quiz

•

9th - 12th Grade

15 questions

Fractions on a Number Line

Quiz

•

3rd Grade

14 questions

Boundaries & Healthy Relationships

Lesson

•

6th - 8th Grade

20 questions

Equivalent Fractions

Quiz

•

3rd Grade

3 questions

Integrity and Your Health

Lesson

•

6th - 8th Grade

25 questions

Multiplication Facts

Quiz

•

5th Grade

9 questions

FOREST Perception

Lesson

•

20 questions

Main Idea and Details

Quiz

•

5th Grade

Formulir tanpa judul

1. Review the IPsec phase 1 configuration in the exhibit; then answer the question below.

Which of the following items is NOT a packet characteristic matched by a firewall service object?

Which web filtering inspection mode inspects DNS traffic?

You have created a new administrator account, and assign it the prof_admin profile. Which is false about that account's permissions?

2. Which of the following statements is correct regarding FortiGate interfaces and spanning tree protocol? (Choose Two)

Which statements are correct properties of a partial mesh VPN deployment. (Choose two.)

Which statement best describes what SSL.root is?

In a FSSO agentless polling mode solution, where must the collector agent be?

How many packets are interchanged between both IPSec ends during the negotiation of a main-mode phase 1?

You have configured the DHCP server on a FortiGate's port1 interface (or internal, depending on the model) to offer IPs in a range of 192.168.1.65-192.168.1.253. When the first host sends a DHCP request, what IP will the DHCP offer?

Access all questions and much more by creating a free account

Similar Resources on Wayground

Popular Resources on Wayground

Discover more resources for others