176 Certification Products • 3429 Comments • 2479 Questions
Which two settings must you configure to allow FortiSIEM to automatically apply tags to devices on FortiClient EMS?
Refer to the exhibit. You used the SD-WAN overlay orchestrator to prepare an IPsec tunnels configuration for a hub-and-spoke SD-WAN topology. The exhibit shows the FortiManager installation preview for one FortiGate device. Based on the exhibit, which statement correctly de...
Refer to the exhibit. A FortiGate segmented into VDOMs is shown. You must ensure effective and accelerated internet access for all of the VDOMs in this enterprise network. How can you achieve this?
Consider the scenario where the server name indication (SNI) does not match either the common name (CN) or any of the subject alternative names (SAN) in the server certificate. Which two actions will FortiGate take when using the default settings for SSL certificate inspection...
You configure the overlay tunnels for an SD-WAN hub-and-spoke topology defined with IPsec tunnels, BGP on loopback, and dynamic BGP. Which are two recommended IPsec settings for this topology?
Refer to the exhibits. The configuration of an SD-WAN rule and the corresponding rule status and routing table are shown. You want to understand the expected behavior for traffic that matches the SD-WAN rule, at the time the output was collected. Based on the exhibits, w...
Refer to the exhibits. The administrator increases the member priority on port2 to 20. Assuming the route egressing port2 is still valid, upon configuration changes and the receipt of new packets. Which two actions does FortiGate perform on existing sessions established...
What are three key routing principles of SD-WAN?
If you configure set tcp-mss-sender and set tcp-mss-receiver in a firewall policy, how does it affect the size and handling of TCP packets in the network?
While troubleshooting a FortiGate web filter issue, users report that they cannot access any websites, even though those sites are not explicitly blocked by any web filter profiles that are applied to firewall policies. What are the three most likely reasons for this behavior?
You want to configure two static routes. One that references a zone and the second one that references an SD-WAN member that belongs to that zone. Which statement about this scenario is true?
Refer to the exhibit. Partial output of a real-time OSPF debug is shown. Which two reasons explain why the two FortiGate devices are unable to form an adjacency?
You have onboarded the organization’s Microsoft Azure account on FortiCNAPP using the automated configuration approach. However, FortiCNAPP does not appear to be receiving any workload scanning data. How can you remedy this?
An administrator has assigned a global policy package to a new ADOM named ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?
Refer to the exhibit. A managed security service provider (MSSP) administration team is trying to deploy a new HA cluster in Azure to filter traffic to and from a client that is also using Azure. However, every deployment attempt fails, and only some of the resources are deplo...
You want to let multiple administrators work in the same ADOM without creating configuration conflicts. What is the best and the most effective solution to apply?
Refer to the following configuration. FortiManager # config system global (global)# set workspace-mode normal (global)# end FortiManager # What are two results from the configuration shown in the exhibit?
Refer to the exhibit. In which type of FortiCNP insights can an administrator examine the findings triggered by this policy?
Refer to the exhibits. The exhibits show the application sensor configuration and the Excessive-Bandwidth and Apple filter details. Based on the configuration, what will happen to Apple FaceTime if there are only a few calls originating or incoming?
An administrator is trying to implement FortiCNP with Microsoft Azure Security integration. However, FortiCNP is not able to extract any cloud integration data from Azure; therefore, real-time cloud security monitoring is not possible. What is causing this issue?