176 Certification Products • 3429 Comments • 2479 Questions
How does the FortiSASE security dashboard facilitate vulnerability management for FortiClient endpoints?
Which secure internet access (SIA) use case minimizes individual endpoint configuration?
A FortiGate device is in production. To optimize WAN link use and improve redundancy, you enable and configure SD-WAN. What must you do as part of this configuration update process?
Which three factors about service-level agreement (SLA) targets and SD-WAN rules should you consider when configuring SD-WAN rules?
A customer configured the On/off-net detection rule to disable FortiSASE VPN auto-connect when users are inside the corporate network. The rule is set to Connects with a known public IP using the company’s public IP address. However, when the users are on the corporate network, t...
Refer to the exhibits. An administrator is testing application steering in SD-WAN. Before generating test traffic, the administrator collected the information shown in the first exhibit. After generating GoToMeeting test traffic, the administrator examined the corresponding...
Refer to the exhibits. You collected the output shown in the exhibits and want to know which interface TCP traffic will flow through from the user device 10.0.1.101 to the corporate file server 10.0.0.125. All SD-WAN links are stable. Which interface will use FortiGate t...
Refer to the exhibits. You connect to a device behind branch1_fgt, a branch FortiGate device, and initiate a ping test. The device is part of the LAN subnet and its IP address is 10.0.1.101. Based on the exhibits, which interface uses branch1_fgt to steer the test traffic?
Refer to the exhibits. The SD-WAN overlay template, advanced settings, and the underlay and network advertisement settings are shown. These are the configurations for the secondary hub of a dual-hub SD-WAN topology created with the FortiManager SD-WAN overlay orchestrator....
* Drag and Drop Question * When configuring the DLP rule in FortiSASE using Regex format, what would be the correct order for the configuration steps? Select the step in the left column, hold and drag it to a blank position in the column on the right. Place the four correct...
Refer to the exhibits. An administrator needs to push a FortiToken Mobile to assign it to HR_user in the HQ-NGFW-1. However, when installing the policy package, they receive the following error message: Copy device global objects Vdom copy failed: error -999 - Cop...
An organization’s guest internet policy, operating in proxy mode, blocks access to artificial intelligence technology sites using FortiGuard. However, a guest user accessed a page in this category using port 8443. Which configuration change must you make for FortiGate to an...
Refer to the exhibit. A network diagram showing the corporate network and a new remote office network is shown. You must integrate the new remote office network with the corporate enterprise network. What must you do to allow routing between the two networks?
You must minimize CPU and RAM use on a FortiGate firewall while also enabling essential security features, such as web filtering and application control for HTTPS traffic. Which SSL inspection setting reduces system load while also enabling security features, such as web filte...
You must use FortiManager to standardize the deployment of same model FortiGate devices across branches with consistent interface roles and policy packages. In this scenario, what is the recommended best practice for interface assignment?
Refer to the exhibit. An OSPF network is shown. Which configuration must you apply to optimize the OSPF database?
Refer to the exhibit. An enterprise network connected to an ISP is shown. You must configure a loopback as a BGP source to connect to the ISP. Which two commands must you use to establish the connection?
Refer to the exhibit. Based on the exhibit, what is the first message that Spoke 1 replies to the hub instructing it to bring up the dynamic tunnel if a client generates traffic destined to Spoke 2?
During the maintenance window, you must sniff all the traffic going through a specific firewall policy, which is handled by NP6 interfaces. The output of the sniffer trace provides just a few packets. Why is the output of the sniffer trace limited?
Refer to the exhibits. The configuration of Windows PC, PC 1, with a default MTU of 1500 bytes, FortiGate interfaces with an MTU of 1000 bytes, and the results of PC 1 pinging over server 172.16.0.251 are shown. Why is the PC1 user unable to ping server 172.16.0.254 and see...